Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cloudflare Load Balancer session affinity cookie (__cflb) misconfiguration #1928

Open
nznaza opened this issue Nov 19, 2024 · 1 comment
Open
Labels
bug filed A bug has been filed in BNet's internal bug tracking system for this request/report.

Comments

@nznaza
Copy link

nznaza commented Nov 19, 2024

Because __cflb cookie cross-site context “SameSite” is not marked as SameSite=None; Secure it will not be sent from third party websites, making web browser third party tools follow normal endpoint route for each request.

Bit more CF information

@aadam-bng
Copy link
Collaborator

Thanks for the report - I've filed a bug on our end to investigate.

@aadam-bng aadam-bng added the bug filed A bug has been filed in BNet's internal bug tracking system for this request/report. label Jan 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug filed A bug has been filed in BNet's internal bug tracking system for this request/report.
Projects
None yet
Development

No branches or pull requests

2 participants