1. First Set Same-Site Cookie 2. Verify Same-Site Cookie Are Set Ot Not. If the browser is protecting the Same Site Cookies, you won't find the Same Site Script sent From Cross Domain in httpbin response