p31829507
/
django
mirror of https://github.com/django/django.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

[3.1.x] Fixed #31934 -- Added note about the default of SameSite cookie flag in modern browsers. 

Backport of 70731fc6fe from master
This commit is contained in:
Hasan Ramezani 2020-08-24 14:00:11 +02:00 committed by Mariusz Felisiak
parent c4e5384e73
commit eda59ba2ec
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/ref/settings.txt
View File

@ -3261,6 +3261,11 @@ Possible values for the setting are:
* ``False``: disables the flag.
.. note::
Modern browsers provide a more secure default policy for the ``SameSite``
flag and will assume ``Lax`` for cookies without an explicit value set.
.. versionchanged:: 3.1
Setting ``SESSION_COOKIE_SAMESITE = 'None'`` was allowed.