Merge branch 'main' into reorg

Author: imchairmanm

docs/courses/level-two/chapter-1.md

@@ -207,17 +207,17 @@ return items[0].json.workEmail.map(item => {
 
 ### Exercise
 
-1. Use the **HTTP Request node** to make a GET request to the Quotable API `https://api.quotable.io/quotes`. (This API requires no authentication).
+1. Use the **HTTP Request node** to make a GET request to the PokéAPI `https://pokeapi.co/api/v2/pokemon`. (This API requires no authentication).
 2. Transform the data in the `results` field with the **Split Out node**.
 3. Transform the data in the `results` field with the **Code node**.
 
 
 ??? note "Show me the solution"
 
-	1. To get the quotes from the Quotable API, execute the **HTTP Request node** with the following parameters:
+	1. To get the pokemon from the PokéAPI, execute the **HTTP Request node** with the following parameters:
 		- **Authentication**: None
 		- **Request Method**: GET
-		- **URL**: https://api.quotable.io/quotes
+		- **URL**: https://pokeapi.co/api/v2/pokemon
 	2. To transform the data with the **Split Out node**, connect this node to the **HTTP Request node** and set the following parameters:
 		- **Field To Split Out**: results
 		- **Include**: No Other Fields

docs/courses/level-two/chapter-2.md

@@ -57,17 +57,17 @@ Use the **XML node** to convert XML to JSON and JSON to XML. This operation is u
 
 ### XML Exercise
 
-In the [final exercise of Chapter 1](/courses/level-two/chapter-1.md#exercise_2), you used an **HTTP Request node** to make a request to the Quotable API. In this exercise, we'll return to that same API but we'll convert the output to XML:
+In the [final exercise of Chapter 1](/courses/level-two/chapter-1.md#exercise_2), you used an **HTTP Request node** to make a request to the PokéAPI. In this exercise, we'll return to that same API but we'll convert the output to XML:
 
-1. Add an **HTTP Request node** that makes the same request to the Quotable API at `https://api.quotable.io/quotes`.
+1. Add an **HTTP Request node** that makes the same request to the PokéAPI at `https://pokeapi.co/api/v2/pokemon`.
 2. Use the XML node to convert the JSON output to XML.
 
 ??? note "Show me the solution"
 
-	1. To get the quotes from the Quotable API, execute the **HTTP Request node** with the following parameters:
+	1. To get the pokemon from the PokéAPI, execute the **HTTP Request node** with the following parameters:
 		- **Authentication**: None
 		- **Request Method**: GET
-		- **URL**: https://api.quotable.io/quotes
+		- **URL**: https://pokeapi.co/api/v2/pokemon
 	2. Connect an **XML node** to it with the following parameters:
 		- **Mode**: JSON to XML
 		- **Property name**: data

docs/hosting/configuration/environment-variables/security.md

@@ -1,7 +1,7 @@
 ---
 #https://www.notion.so/n8n/Frontmatter-432c2b8dff1f43d4b1c8d20075510fe4
 title: Security environment variables
-description: Configure authentication and environment variable access in self-hosted n8n instance. 
+description: Configure authentication and environment variable access in self-hosted n8n instance.
 contentType: reference
 tags:
   - environment variables
@@ -20,4 +20,5 @@ hide:
 | `N8N_RESTRICT_FILE_ACCESS_TO` | String |  | Limits access to files in these directories. Provide multiple files as a colon-separated list ("`:`"). |
 | `N8N_BLOCK_FILE_ACCESS_TO_N8N_FILES` | Boolean | `true` | Set to `true` to block access to all files in the `.n8n` directory and user defined configuration files. |
 | `N8N_SECURITY_AUDIT_DAYS_ABANDONED_WORKFLOW` | Number | 90 | Number of days to consider a workflow abandoned if it's not executed. |
-| `N8N_SECURE_COOKIE` | Boolean | `true` | Ensures that cookies are only sent over HTTPS, enhancing security.|
+| `N8N_SECURE_COOKIE` | Boolean | `true` | Ensures that cookies are only sent over HTTPS, enhancing security.|
+| `N8N_SAMESITE_COOKIE` | Enum string: `strict`, `lax`, `none` | `lax` | Controls cross-site cookie behavior ([learn more](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite)):<ul><li>`strict`: Sent only for first-party requests.</li><li>`lax` (default): Sent with top-level navigation requests.</li><li>`none`: Sent in all contexts (requires HTTPS).</li></ul> |