different samesite lax behavior on chrome versus firefox for the following:
- an html document on my site includes an iframe with another document on my site
- then, a third party document is loaded in the iframe (with a return_url passed as a param)
- then, the third party redirects to the first party (my site) return url inside the iframe
on chrome, the lax cookies are sent but on firefox the lax cookies are not sent.
it is not clear to me what the expected behavior is. is there a standards document that explains what the correct behavior is in this particular situation (a third party redirect back to first party inside an iframe)?