at://
/
app.bsky.feed.post
/
3moitvr3dbc2g
sign in
All
4
Record
2
Post
1
PostEmbed
1
Post
by @danabra.mov
PostEmbed
by @danabra.mov
Record
by @jimpick.com
Record
by @atsui.org
+ new component
PostEmbed
## Impact When undici parses a `Set-Cookie` header, it accepts any `SameSite` attribute value that contains `Strict`, `Lax`, or `None` as a substring, rather than the case-insensitive exact matc...
github.com
undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
