3 ms·
Cookie Chaos: How to bypass __Host and __Secure cookie prefixes
- nomoreofthat 1y agoThat’s clever! Disappointing response from Django if that means they’re not going to fix it… I could understand it being outside the scope of their official vulnerability classification/process/whatever, but it’s still a clear correctness bug.