Merge pull request mendix#6413 from mendix/ad-7.23.36-rn

7.23.36 RN

Author: Adam Dupaski

content/en/docs/releasenotes/studio-pro/7/7.23.md

@@ -14,6 +14,20 @@ weight: 77
 Support for Mendix 7 is available after the release of Mendix 10 for a maximum duration of one year. For details, see the [Extended Support](/developerportal/support/#extended-support) section in *Mendix Support*.
 {{% /alert %}}
 
+## 7.23.36 {#72336}
+
+**Release date: September 18 22, 2023**
+
+{{% button color="info" href="https://marketplace.mendix.com/link/studiopro/7.23.36" text="Go to Marketplace" title="Download version 7.23.36 from the Marketplace" %}}
+
+### Improvements
+
+* We now support the `SameSite` parameter in HTTPS cookies. This setting can be configured using the `com.mendix.core.SameSiteCookies` Mendix Runtime setting.
+
+### Fixes
+
+* We added the custom setting `RequestHandling.AllowLegacyCookies` to allow for violations of RFC 6265, which is enforced in the most recent Jetty versions (for more information, see [RFC6265_LEGACY](https://www.eclipse.org/jetty/javadoc/jetty-10/org/eclipse/jetty/http/CookieCompliance.html#RFC6265_LEGACY)). Be aware of the fact that enabling this custom setting exposes your app to [CVE-2023-26049](https://www.cve.org/CVERecord?id=CVE-2023-26049).
+
 ## 7.23.35 {#72335}
 
 **Release date: April 24, 2023**