SameSite: Hax – Exploiting CSRF With The Default SameSite Policy

https://pulsesecurity.co.nz/articles/samesite-lax-csrf