CSRF protection in Phoenix with Sec-Fetch-Site

Interesting. I was familiar with the Go CORS middleware. Nice to see the same approach spreading to other domains.