Cookie Settings for PoolParty

You can use the SameSite and HttpOnly cookie flags to make the PoolParty managed cookies more secure.

The SameSite cookie flag prevents the browser from sending this cookie along with cross-site requests. The main goal is to mitigate the risk of cross-origin information leakage. It also provides some protection against cross-site request forgery attacks.

The HttpOnly cookie flag is a tag added to a browser cookie preventing client-based scripts from accessing data. It provides a gate preventing the specialized cookie from being accessed by anything other than the server. Using the HttpOnly tag when generating a cookie helps to mitigate the risk of client-based scripts accessing the protected cookie, thus making these cookies more secure.

By default, PoolParty comes with the HttpOnly flag activated and the SameSite flag set to lax.