diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt index bf2d1ed6b08..9a2f1457ac9 100644 --- a/docs/ref/settings.txt +++ b/docs/ref/settings.txt @@ -3241,6 +3241,11 @@ Possible values for the setting are: * ``False``: disables the flag. +.. note:: + + Modern browsers provide a more secure default policy for the ``SameSite`` + flag and will assume ``Lax`` for cookies without an explicit value set. + .. versionchanged:: 3.1 Setting ``SESSION_COOKIE_SAMESITE = 'None'`` was allowed.