sections_fts: 79
This data as json
| rowid | title | content |
|---|---|---|
| 79 | Security properties | For defense-in-depth the ds_actor and ds_messages cookies continue to be set with SameSite=Lax (Datasette's long-standing default). This means a genuine cross-site POST from an attacker's page would arrive without the user's authentication cookie even if the header check somehow failed. |