[3.1.x] Fixed #31934 -- Added note about the default of SameSite cook…

…ie flag in modern browsers. Backport of 70731fc from master
django · Aug 31, 2020 · eda59ba · eda59ba
1 parent c4e5384
commit eda59ba
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt
@@ -3261,6 +3261,11 @@ Possible values for the setting are:
 
 * ``False``: disables the flag.
 
+.. note::
+
+    Modern browsers provide a more secure default policy for the ``SameSite``
+    flag and will assume ``Lax`` for cookies without an explicit value set.
+
 .. versionchanged:: 3.1
 
     Setting ``SESSION_COOKIE_SAMESITE = 'None'`` was allowed.