freeCodeCamp: Missing SameSite header in CDN

Describe the bug

All the modern browsers have started to enforce the SameSite header for security reasons. Previously, None used to be the default value, but recent browser versions made Lax the default value to have reasonably robust defense against some classes of cross-site request forgery (CSRF) attacks.

FCC doesn’t specify the SameSite header and the current browsers default to None but in the near future this will change. Browsers in the near future will default to Lax, so to ensure the expected behaviour, we need to add the SameSite header with the Secure header.

To Reproduce Steps to reproduce the behavior:

1. Open any page or resurce that uses the CDN
2. Open the console (in Chrome) and see the warning

Expected behavior

The expected behaviour is to see no warning and the CDN should work as normal.

Screenshots

Here’s a screenshot of the warning ->

Desktop (please complete the following information):

• OS: Windows 10 (64 Bit)
• Browser: Chrome
• Version: 83.0.4103.61 (Official Build) (64-bit)