From 864a82918ecfc357378a6a3c84a2f5ffda4b26c9 Mon Sep 17 00:00:00 2001 From: Taylor Otwell Date: Mon, 6 Mar 2017 08:50:01 -0600 Subject: [PATCH] fix comment --- config/session.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/config/session.php b/config/session.php index c29bc5cb..f222f747 100644 --- a/config/session.php +++ b/config/session.php @@ -178,10 +178,12 @@ return [ /* |-------------------------------------------------------------------------- - | Same-site Cookies + | Same-Site Cookies |-------------------------------------------------------------------------- | - | Here you may change the default value of the same-site cookie attribute. + | This option determines how your cookies behave when cross-site requests + | take place, and can be used to mitigate CSRF attacks. By default, we + | do not enable this as other CSRF protection services are in place. | | Supported: "lax", "strict" |