{ "schema_version": "proof-request/v1", "run": { "id": "wiki-source-summarizer-samesite-mdn-2026-07-23", "profile": "capture" }, "proofs": [ { "finding": {"id": "MDN-SAMESITE-C1", "role": "quote"}, "source": { "namespace": "repo", "path": "harness/state/commit-runs/samesite-cookie-mdn/source-fetch.txt", "quote_utf8": "Send the cookie only for requests originating from the same site that set the cookie." } }, { "finding": {"id": "MDN-SAMESITE-C2", "role": "quote"}, "source": { "namespace": "repo", "path": "harness/state/commit-runs/samesite-cookie-mdn/source-fetch.txt", "quote_utf8": "Send the cookie only for requests originating from the same site that set the cookie, and for cross-site requests that meet both of the following criteria:" } }, { "finding": {"id": "MDN-SAMESITE-C3", "role": "quote"}, "source": { "namespace": "repo", "path": "harness/state/commit-runs/samesite-cookie-mdn/source-fetch.txt", "quote_utf8": "The request uses a safe method: in particular, this excludes POST, PUT, and DELETE." } }, { "finding": {"id": "MDN-SAMESITE-C4", "role": "quote"}, "source": { "namespace": "repo", "path": "harness/state/commit-runs/samesite-cookie-mdn/source-fetch.txt", "quote_utf8": "Send the cookie with both cross-site and same-site requests.\nThe Secure attribute must also be set when using this value." } }, { "finding": {"id": "MDN-SAMESITE-C5", "role": "quote"}, "source": { "namespace": "repo", "path": "harness/state/commit-runs/samesite-cookie-mdn/source-fetch.txt", "quote_utf8": "Some browsers use Lax as the default value if SameSite is not specified: see Browser compatibility for details." } } ] }