Comment by paul_h

3 months ago

If not using the custom domain stuff, cookies need protection via Set-Cookie with `SameSite=Strict`, right? I couldn't see a note in the documentation

0 comments