p15693087
/
django
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fixed #31934 -- Added note about the default of SameSite cookie flag in modern browsers.

This commit is contained in:
Hasan Ramezani 2020-08-24 14:00:11 +02:00 committed by Mariusz Felisiak
parent 179d9dc0c2
commit 70731fc6fe
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/ref/settings.txt
View File

@ -3241,6 +3241,11 @@ Possible values for the setting are:
* ``False``: disables the flag.
.. note::
Modern browsers provide a more secure default policy for the ``SameSite``
flag and will assume ``Lax`` for cookies without an explicit value set.
.. versionchanged:: 3.1
Setting ``SESSION_COOKIE_SAMESITE = 'None'`` was allowed.