fix: GEO-1237, GEO-1238 - fixed critical security issues identified in WAVA scan#858

Merged

sukanya-rath merged 8 commits intomainfrom fix/security-issues

Nov 26, 2024

+152-103

Commits on Nov 22, 2024

use 'samesite:lax' setting for cookies. it provides some deterance against CSRF attacks, but it's not so strict as to break the login flow.
banders
committed

Commits on Nov 26, 2024