CVE-2023-49793: Python Http Server Cookie Missing Samesitecve-2023-49793-python-http-server-cookie-missing-samesite
A cookie is set via `send_header` without including the `SameSite` attribute. This lack of cross-origin restriction exposes the application to Cross-Site Request Forgery (CSRF) if the cookie handles sensitive session access. Add `SameSite=Lax` or `SameSite=Strict` to the cookie string to securely limit cross-origin exposure.
