Comment on Downgrade User Agent Client Hints to 'harmful'parentComments−banana_giraffe5yI don't think I've ever seen it called out, but I always assumed it's "Secure" in the sense it hasn't been modified by a script.But that's 100% a guess on my part.−herpderperator5yGreat, so now we have the HttpOnly flag for cookies which differs from the Secure flag for cookies, while the Secure in the Sec headers has the same meaning as HttpOnly.−billyhoffman5yAnd we have SameSite in Cookies, and Allow-Origin in headers!
Comments
I don't think I've ever seen it called out, but I always assumed it's "Secure" in the sense it hasn't been modified by a script.
But that's 100% a guess on my part.
Great, so now we have the HttpOnly flag for cookies which differs from the Secure flag for cookies, while the Secure in the Sec headers has the same meaning as HttpOnly.
And we have SameSite in Cookies, and Allow-Origin in headers!