None Restores Cross-Site Cookies
A CookieBank integration explicitly uses SameSite=None; Secure because it expects cross-site requests. Test the same attacker-originated POST again and observe the security consequence.
Objective
Make the cross-site POST arrive with the SameSite=None session and recover the flag.