PortSwigger Said Chrome Updates Broke Its CSRF Lab. My Tests Tell a Different Story
Published: October 15, 2026
Duration: 18:05
This story was originally published on HackerNoon at: https://hackernoon.com/portswigger-said-chrome-updates-broke-its-csrf-lab-my-tests-tell-a-different-story.
PortSwigger removed a SameSite Lax CSRF bypass lab after citing Chrome updates. Independent tests across 8 Chrome versions suggest the bypass still works.
Check more stories related to cybersecurity at: https://hackernoon.com/c/cybersecurity.
You can also check exclusive content about #web-security, #bug-bounty, #portswigger, #infosec, #penetration-testing, #cybersecurity, #csrf, #hackernoon-top-story, and more.
This story was written by: @rivenx173. Learn more about this writer by checking @rivenx173's about page,
and for more stories, please visit hackernoon.com.
On August 11, 2026, I was one...