Jure Cerjak

Cypress image with latest 14.x nodejs version is [14.9.0](https://github.com/cypress-io/cypress-docker-images/blob/master/base/14.19.0/Dockerfile), which has a lot of critical vulnerabilities as per: https://snyk.io/test/docker/node%3A14.19.0-buster Can you please provide an image based on latest 14.x nodejs...

Potentially dangerous and inconsistent behavior for secrets

8

### Checklist - [X] I have looked into the [README](https://github.com/auth0/auth0-deploy-cli#readme) and have not found a suitable solution or answer. - [X] I have looked into the [documentation](https://github.com/auth0/auth0-deploy-cli#documentation) and have not...

Security improvements for "Double-Submit Cookie" CSRF protection

1

I've noticed some potential issues with the Double-Submit Cookie approach for CSRF protection, implemented by [CookieCSRFStoragePolicy](https://github.com/Pylons/pyramid/blob/ef0f6861e5b439afe43983f6c7437c30a413a34d/src/pyramid/csrf.py#L95C7-L95C30). As discussed via [security group email](https://github.com/Pylons/pyramid/security), it's ok to mention them here. ## Recommendation...