Update FAQ for SameSite

Update FAQ for SameSite

Author: surajmb

articles/application-gateway/application-gateway-faq.md

@@ -405,6 +405,9 @@ But if you'd like to use Application Gateway V2 with only private IP, you can fo
 Sample NSG configuration for private IP only access:
 ![Application Gateway V2 NSG Configuration for private IP access only](./media/application-gateway-faq/appgw-privip-nsg.png)
 
+### Does Application Gateway affinity cookie support SameSite attribute?
+Yes, the [Chromium browser](https://www.chromium.org/Home) [v80 update](https://chromiumdash.appspot.com/schedule) introduced a mandate on HTTP cookies without SameSite attribute to be treated as SameSite=Lax. This would mean that the Application Gateway affinity cookie won't be sent by the browser in a third-pary context. 
+To support this scenario, Application Gateway will be injecting another cookie called “ApplicationGatewayAffinityCORS” in addition to the existing ApplicationGatewayAffinity cookie, which is similar, but this cookie will now have two more attributes “SameSite=None; Secure” added to it so that sticky session can be maintained even for cross-origin requests. See [cookie based affinity section](configuration-overview.md#cookie-based-affinity) for more information.
 
 ## Next steps