1
0
mirror of https://github.com/django/django.git synced 2025-03-21 14:50:45 +00:00

3 Commits

Author SHA1 Message Date
Mariusz Felisiak
54dce8148a [3.1.x] Refs #31790 -- Removed incorrect item from 2.2.15 and 3.0.9 release notes.
Django 2.2 and 3.0 don't support settings samesite='None' in
HttpResponse.set_cookie() so fix is not necessary and will not be
backported.
Backport of 9bc8b1ad2d88209bf45f389fe3cc8b94909b0e72 from master
2020-07-16 09:27:39 +02:00
Mariusz Felisiak
3ca8cc0df1 [3.1.x] Fixed #31790 -- Fixed setting SameSite and Secure cookies flags in HttpResponse.delete_cookie().
Cookies with the "SameSite" flag set to None and without the "secure"
flag will be soon rejected by latest browser versions.

This affects sessions and messages cookies.
Backport of 240cbb63bf9965c63d7a3cc9032f91410f414d46 from master
2020-07-16 08:17:45 +02:00
Mariusz Felisiak
4e3b0f56ba [3.1.x] Added stub release notes for 3.0.9.
Backport of c2a835703f706583542e9dae82749ac3b92819f8 from master
2020-07-01 07:12:40 +02:00