A cookie associated with a cross-site resource at http://placeholder.com/ was set without the `SameSite` attribute.

JavaScript
response.setHeader("Set-Cookie", "HttpOnly;Secure;SameSite=Strict");
Source

Also in JavaScript: