SameSite is case-insensitive per RFC 6265bis but servers send it in any casing (lax, LAX, Lax). Normalize to title-case at parse time so downstream comparisons work regardless. Unknown values fall back to Lax per spec.
SameSite is case-insensitive per RFC 6265bis but servers send it in any casing (lax, LAX, Lax). Normalize to title-case at parse time so downstream comparisons work regardless. Unknown values fall back to Lax per spec.