LAX

The cookie is withheld on cross-site requests but exposed on cross-site navigations