Why are cookies sent in the xhr request inspite of not being set in the Chrome Application tab —> cookies?
I have 2 angular applications: csrfexample.com:4200 and attacker.csrfexample.com:4201. Both these application connect to a node server: csrfexample.com:3000.