samesite-threat-model

20260916-201504 轮 · 看它的历史
[登录] adminname=e2e_admin10 vip=10  target=http://h8
[cookie] PHPSESSID sameSite=Lax httpOnly=true domain=h8

  ✔ PASS  cookie 属性 sameSite  got="Lax" want="Lax"
  [向量 img] method=GET 携带PHPSESSID=false
  ✔ PASS  跨站 img 携带 session cookie  got=false want=false
  [向量 formPost] method=POST 携带PHPSESSID=false
  ✔ PASS  跨站 formPost 携带 session cookie  got=false want=false
  [向量 formGet] method=GET 携带PHPSESSID=true
  ✔ PASS  跨站 formGet 携带 session cookie  got=true want=true
  [向量 topNavGet] method=GET 携带PHPSESSID=true
  ✔ PASS  跨站 topNavGet 携带 session cookie  got=true want=true
  [向量 fetchCred] method=GET 携带PHPSESSID=false
  ✔ PASS  跨站 fetchCred 携带 session cookie  got=false want=false
  [对照 同站POST] method=POST 携带PHPSESSID=true
  ✔ PASS  【对照组】同站 POST 必须携带 cookie(否则本测试无分辨力)  got=true want=true

=== PASS=7 FAIL=0 ===