mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-07-24 05:36:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

[3.1.x] Fixed #31934 -- Added note about the default of SameSite cookie flag in modern browsers.

Browse source 
Backport of 70731fc6fe from master
This commit is contained in:
Hasan Ramezani 2020-08-24 14:00:11 +02:00 • committed by Mariusz Felisiak
parent c4e5384e73
commit eda59ba2ec
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/ref/settings.txt
View file

@ -3261,6 +3261,11 @@ Possible values for the setting are:
* ``False``: disables the flag.
.. note::
Modern browsers provide a more secure default policy for the ``SameSite``
flag and will assume ``Lax`` for cookies without an explicit value set.
.. versionchanged:: 3.1
Setting ``SESSION_COOKIE_SAMESITE = 'None'`` was allowed.