2 ms·

HEIST: HTTP Encrypted Information Can Be Stolen Through TCP-Windows [pdf]

• collinmanderson 9y ago
  Seems to me same-site cookies would solve this problem. https://www.owasp.org/index.php/SameSite https://www.owasp.org/index.php/SameSite