PortSwigger Said Chrome Updates Broke Its CSRF Lab. My Tests Tell a Different Story | HackerNoon

PortSwigger removed a SameSite Lax CSRF bypass lab after citing Chrome updates. Independent tests across 8 Chrome versions suggest the bypass still works.