From af681e5ab6b4248332eb85a895a4845722735399 Mon Sep 17 00:00:00 2001 From: Bert Heyman Date: Fri, 13 Dec 2019 15:18:09 +0100 Subject: [PATCH] Add "none" to supported same site options in session config (#5174) --- config/session.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/session.php b/config/session.php index fbb9b4d765d..857ebc3eab8 100644 --- a/config/session.php +++ b/config/session.php @@ -190,7 +190,7 @@ | take place, and can be used to mitigate CSRF attacks. By default, we | do not enable this as other CSRF protection services are in place. | - | Supported: "lax", "strict" + | Supported: "lax", "strict", "none" | */