Fix cookie SameSite not being set, iframes not being denied - Githubissues

Demindiro / agreper

Minimal, no-JS web forum software

https://forum.agreper.com/

GNU Affero General Public License v3.0

654 stars 27 forks source link

Fix cookie SameSite not being set, iframes not being denied #22

Closed Demindiro closed 1 year ago

Demindiro commented 1 year ago

SameSite not being set allowed CSRF attacks.
iframes not being denied allowed clickjacking attacks.