From 885e7adf568037b59b5642ab061133eaa00e5d7d Mon Sep 17 00:00:00 2001
From: Daniel Pyrathon <pirosb3@gmail.com>
Date: Sat, 15 Mar 2014 19:18:05 +0000
Subject: [PATCH] Fixed #22242 -- Documented common cookie size limit.

---
 docs/ref/request-response.txt | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docs/ref/request-response.txt b/docs/ref/request-response.txt
index 3cff5c26d9..8212511f7e 100644
--- a/docs/ref/request-response.txt
+++ b/docs/ref/request-response.txt
@@ -723,6 +723,14 @@ Methods
 
     .. _HTTPOnly: https://www.owasp.org/index.php/HTTPOnly
 
+    .. warning::
+
+        Both :rfc:`2109` and :rfc:`6265` state that user agents should support
+        cookies of at least 4096 bytes. For many browsers this is also the
+        maximum size. Django will not raise an exception if there's an attempt
+        to store a cookie of more than 4096 bytes, but many browsers will not
+        set the cookie correctly.
+
 .. method:: HttpResponse.set_signed_cookie(key, value, salt='', max_age=None, expires=None, path='/', domain=None, secure=None, httponly=True)
 
     Like :meth:`~HttpResponse.set_cookie()`, but