Took a long break from contributing to open-source projects but I finally feel like it's time to slowly get back into it.
Started today with two pull requests to Mastodon:
- Use same-site cookies to mitigate CSFR attacks (on top of the CSFR token that Mastodon already implements)
- Send Clear-Site-Data header when logging out, which instructs the browser to delete the cookies, storage and cache