Definition
Same-Site Attacker Model
In the same-site attacker model the attacker controls a subdomain of the target site, e.g.
evil.bank.com, and lures the victim there. Because the attacker operates inside the target’s site, they may hold a valid TLS certificate for their subdomain and gain capabilities beyond a plain web attacker — for example, subdomain-based relaxations of cookie or CSP policy.