SameSite
is the SameSite attribute of a Set-Cookie header (RFC
6265bis): Strict sends the cookie on same-site requests only, Lax sends it on
top-level cross-site navigations as well, and None sends it on every request. A
Cookie always carries one and Cookie.set
always writes it; the zero value is Lax.
(Cookie.set &(Cookie.set-samesite cookie (SameSite.Strict)))
; => "id=abc; Path=/; SameSite=Strict"
delete
instantiate
(Fn [SameSite] ())
deletes a SameSite. This should usually not be called manually.