Merge branch 'main' into waf/package-versions

Author: Alan Dooley

content/nic/changelog/_index.md

@@ -32,7 +32,7 @@ For older releases, check the changelogs for previous years: [2024]({{< ref "/ni
 
 - [8690](https://github.com/nginx/kubernetes-ingress/pull/8690) Update stub_status client path
 - [8731](https://github.com/nginx/kubernetes-ingress/pull/8731) Update service template for ipfamilies
-- [8743](https://github.com/nginx/kubernetes-ingress/pull/8743) Add more validation on rewrite-target
+- [8743](https://github.com/nginx/kubernetes-ingress/pull/8743) Fix CVE-2025-14727 Adding more validation on rewrite-target
 
 ### {{% icon arrow-up %}} Dependencies
 

content/waf/policies/cookie-enforcement.md

@@ -16,7 +16,7 @@ You can control the attributes within these cookies.
 | ------------------- | ------------- | ---------------- | --------------- |
 | `httpOnlyAttribute` | _true_        | _false_          | _true_ in all policies |
 | `secureAttribute`   | _never_       | _always_          | _always_ in the strict and API policies |
-| `sameSiteAttribute` | _lax_      | _none-value_, _strict_,  _none_ | _strict_ in the strict policy, _none_ removes the attribute entirely  |
+| `sameSiteAttribute` | _strict_      | _none-value_, _strict_,  _none_ | _strict_ in the strict policy, _none_ removes the attribute entirely  |
 
 In this example, HttpOnly is configured as `true`, Secure as `never`, and SameSite as `strict`.