NONE

The cookie is exposed with both cross-site and same-site requests