diff options
Diffstat (limited to 'docs/ref')
| -rw-r--r-- | docs/ref/request-response.txt | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/docs/ref/request-response.txt b/docs/ref/request-response.txt index 3cff5c26d9..8212511f7e 100644 --- a/docs/ref/request-response.txt +++ b/docs/ref/request-response.txt @@ -723,6 +723,14 @@ Methods .. _HTTPOnly: https://www.owasp.org/index.php/HTTPOnly + .. warning:: + + Both :rfc:`2109` and :rfc:`6265` state that user agents should support + cookies of at least 4096 bytes. For many browsers this is also the + maximum size. Django will not raise an exception if there's an attempt + to store a cookie of more than 4096 bytes, but many browsers will not + set the cookie correctly. + .. method:: HttpResponse.set_signed_cookie(key, value, salt='', max_age=None, expires=None, path='/', domain=None, secure=None, httponly=True) Like :meth:`~HttpResponse.set_cookie()`, but |