'How to set Sec-fetch-site : none on POST requests?
I saw this header is set by user interaction- for example by writing manually the url in the url bar/bookmarks etc..
Any ideas to make a user initiated post request so this header will be passed? I have a vulnerable application to csrf only when this header is set. The request method is POST.
thanks in advance!
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|
