Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Browse files

Fixed #22242 -- Documented common cookie size limit.

  • Loading branch information...
commit 885e7adf568037b59b5642ab061133eaa00e5d7d 1 parent 834d78f
@PirosB3 PirosB3 authored timgraham committed
Showing with 8 additions and 0 deletions.
  1. +8 −0 docs/ref/request-response.txt
View
8 docs/ref/request-response.txt
@@ -723,6 +723,14 @@ Methods
.. _HTTPOnly: https://www.owasp.org/index.php/HTTPOnly
+ .. warning::
+
+ Both :rfc:`2109` and :rfc:`6265` state that user agents should support
+ cookies of at least 4096 bytes. For many browsers this is also the
+ maximum size. Django will not raise an exception if there's an attempt
+ to store a cookie of more than 4096 bytes, but many browsers will not
+ set the cookie correctly.
+
.. method:: HttpResponse.set_signed_cookie(key, value, salt='', max_age=None, expires=None, path='/', domain=None, secure=None, httponly=True)
Like :meth:`~HttpResponse.set_cookie()`, but
Please sign in to comment.
Something went wrong with that request. Please try again.