Open eliben opened 1 year ago
The userinfo example stores state in a cookie but doesn't set a SameSite attribute on the cookie.
state
SameSite
Is there a reason not to do so for better security?
The userinfo example stores
state
in a cookie but doesn't set aSameSite
attribute on the cookie.Is there a reason not to do so for better security?