The SameSite attribute can be used to indicate whether to send a cookie in a cross-site request. The SameSite attribute is used to control how cookies are sent with cross-site requests, and it can have one of three values:

  • SameSite=Lax: Cookies will be sent with cross-site requests only if they originate from a top-level navigation. This is the default behavior if the SameSite attribute is not specified.
  • SameSite=Strict: Cookies will only be sent with same-site requests.
  • SameSite=None: Cookies will be sent with both same-site and cross-site requests.

To indicate whether to send a cookie in a cross-site request, you can set the SameSite attribute to either None or Lax, depending on your use case. If you need the cookie to be sent with cross-site requests, you can set the SameSite attribute to None. If you want to restrict the cookie to same-site requests only, you can set the SameSite attribute to Strict.