Bug 700 - Vulnerability observed on WEBUI samesite cookies not implemented (CWE-16) ||AS-6535||
Review Request #229 — Created April 23, 2024 and submitted
| Information | |
|---|---|
| shuinvy | |
| APV10 | |
| rel_apv_10_7 | |
| 700 | |
| Reviewers | |
| tanya, timlai | |
Add 'SameSite=Lax' to Cookie property
I referenced the plugin of python: django-cookies-samesite 0.9.0.
The middleware have to be removed after we upgrade to Python 3.9.
