From 136085bfd8361969a7daedc2308e0b59dbd41f60 Mon Sep 17 00:00:00 2001 From: Bert Heyman Date: Fri, 13 Dec 2019 15:18:09 +0100 Subject: [PATCH] Add "none" to supported same site options in session config (#5174) --- config/session.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/session.php b/config/session.php index fbb9b4d7..857ebc3e 100644 --- a/config/session.php +++ b/config/session.php @@ -190,7 +190,7 @@ return [ | take place, and can be used to mitigate CSRF attacks. By default, we | do not enable this as other CSRF protection services are in place. | - | Supported: "lax", "strict" + | Supported: "lax", "strict", "none" | */