How to use:
  1. Make sure Schemeful Same-Site is enabled in your browser.
  2. You're currently on the https version of this site. Click below to set cookies, then come back here.
  3. Observe that the https-in-https frame is same-site, and the http-in-https frame is blocked as mixed content.
  4. Click below to go to the http version of the site. Observe that the http-in-http frame is same-site, and the https-in-http frame is cross-site.
Click here to set cookies.
Go to https page. Go to http page.

Cookie header: