Open eliben opened 10 months ago
The userinfo example stores state in a cookie but doesn't set a SameSite attribute on the cookie.
state
SameSite
Is there a reason not to do so for better security?
The userinfo example stores
statein a cookie but doesn't set aSameSiteattribute on the cookie.Is there a reason not to do so for better security?