samesite-threat-model
[登录] adminname=e2e_admin10 vip=10 target=http://h8
[cookie] PHPSESSID sameSite=Lax httpOnly=true domain=h8
✔ PASS cookie 属性 sameSite got="Lax" want="Lax"
[向量 img] method=GET 携带PHPSESSID=false
✔ PASS 跨站 img 携带 session cookie got=false want=false
[向量 formPost] method=POST 携带PHPSESSID=false
✔ PASS 跨站 formPost 携带 session cookie got=false want=false
[向量 formGet] method=GET 携带PHPSESSID=true
✔ PASS 跨站 formGet 携带 session cookie got=true want=true
[向量 topNavGet] method=GET 携带PHPSESSID=true
✔ PASS 跨站 topNavGet 携带 session cookie got=true want=true
[向量 fetchCred] method=GET 携带PHPSESSID=false
✔ PASS 跨站 fetchCred 携带 session cookie got=false want=false
[对照 同站POST] method=POST 携带PHPSESSID=true
✔ PASS 【对照组】同站 POST 必须携带 cookie(否则本测试无分辨力) got=true want=true
=== PASS=7 FAIL=0 ===