# Protection

- [Security Mechanisms for Websites](/sec-88/web-appsec/protection/security-mechanisms-for-websites.md)
- [Cookie Flags](/sec-88/web-appsec/protection/cookie-flags.md): https://www.invicti.com/white-papers/security-cookies-whitepaper/
- [SameSite Cookie Restrictions](/sec-88/web-appsec/protection/bypassing-samesite-cookie-restrictions.md): https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions
- [Same-origin policy (SOP)](/sec-88/web-appsec/protection/same-origin-policy-sop.md)
- [CSP](/sec-88/web-appsec/protection/csp.md)
