From 8eab3136a7e839bd132184601a816bcbe90f2f48 Mon Sep 17 00:00:00 2001 From: jvoisin Date: Wed, 9 Jan 2019 20:57:42 +0100 Subject: Add a note about PHP7.3+ SameSite support --- doc/source/cookies.rst | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'doc/source') diff --git a/doc/source/cookies.rst b/doc/source/cookies.rst index 856927d..9398d39 100644 --- a/doc/source/cookies.rst +++ b/doc/source/cookies.rst @@ -25,11 +25,12 @@ It can either be ``enabled`` or ``disabled``. cookie_samesite """"""""""""""" -:ref:`samesite `, disabled by default, will add the `samesite +:ref:`samesite `, disabled by default, adds the `samesite `_ attribute to cookies. It `prevents CSRF `_ but is not implemented by `all web browsers `_ -yet. +yet. Note that this is orthogonal to `PHP7.3+ SameSite support +`__. It can either be set to ``strict`` or ``lax``: -- cgit v1.3