diff options
| author | Hasan Ramezani <hasan.r67@gmail.com> | 2020-08-24 14:00:11 +0200 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2020-08-31 10:57:41 +0200 |
| commit | 70731fc6feeb40eab535781e938b0e67ff0077ad (patch) | |
| tree | d12486f1c814a48c0c610e7d8ca2ef812cca1283 /docs | |
| parent | 179d9dc0c2265176f9f7062a1d98dc44d896f91f (diff) | |
Fixed #31934 -- Added note about the default of SameSite cookie flag in modern browsers.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/ref/settings.txt | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt index bf2d1ed6b0..9a2f1457ac 100644 --- a/docs/ref/settings.txt +++ b/docs/ref/settings.txt @@ -3241,6 +3241,11 @@ Possible values for the setting are: * ``False``: disables the flag. +.. note:: + + Modern browsers provide a more secure default policy for the ``SameSite`` + flag and will assume ``Lax`` for cookies without an explicit value set. + .. versionchanged:: 3.1 Setting ``SESSION_COOKIE_SAMESITE = 'None'`` was allowed. |