mirror of
https://github.com/django/django.git
synced 2025-03-14 03:10:45 +00:00
Cookies with the "SameSite" flag set to None and without the "secure" flag will be soon rejected by latest browser versions. This affects sessions and messages cookies. Backport of 240cbb63bf9965c63d7a3cc9032f91410f414d46 from master
18 lines
425 B
Plaintext
18 lines
425 B
Plaintext
==========================
|
|
Django 3.0.9 release notes
|
|
==========================
|
|
|
|
*Expected August 3, 2020*
|
|
|
|
Django 3.0.9 fixes several bugs in 3.0.8.
|
|
|
|
Bugfixes
|
|
========
|
|
|
|
* Allowed setting the ``SameSite`` cookie flag in
|
|
:meth:`.HttpResponse.delete_cookie` (:ticket:`31790`).
|
|
|
|
* Fixed setting the ``Secure`` cookie flag in
|
|
:meth:`.HttpResponse.delete_cookie` for cookies that use ``samesite='none'``
|
|
(:ticket:`31790`).
|