Finding: Base64-encoded data in parameter

> Recommendation: Applications sometimes Base64-encode parameters in an attempt to obfuscate them from users or facilitate transport of binary data. The presence of Base64-encoded data may indicate security-sensitive information or functionality that is worthy of further investigation. The data should be reviewed to determine whether it contains any interesting information, or provides any additional entry points for malicious input.

Consider noted usage of Strapi cookie's base64 encoding of oauth grant.

Start by locating the Strapi cookie handling and the noted OAuth grant usage. Review the Base64-encoded parameter contents for sensitive information and determine whether the encoding exposes additional malicious-input entry points. Done means documenting the finding and any required remediation.

Written by the indexing model from the issue text.