Hi,
I looked at it and I think PR #11894 should be backported to all working
versions of Django. It doesn't look like it will introduce new bugs or
regressions. All I need is these 2 lines:
if samesite.lower() not in ('lax', 'strict'):
raise ValueError('samesite must be "lax" or "strict".')
if samesite.lower() not in ('lax', 'none', 'strict'):
raise ValueError('samesite must be "lax", "none", or "strict".')
And the relevant documentation. This will allow setting cookies explicitly
to SameSite=None. Since Django 2.2 should be supported until 2022, I think
it makes sense to backport it to Django 2.2 and 3.0.
אורי
[email protected]
On Sat, Aug 22, 2020 at 9:48 PM Mariusz Felisiak <[email protected]>
wrote:
> We decided that it's a new feature that will not be backported to Django
> 3.0, see #30862 <https://code.djangoproject.com/ticket/30862>, and
> discussion in PR <https://github.com/django/django/pull/11894> (with few
> simple workarounds).
>
> Best,
> Mariusz
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django developers (Contributions to Django itself)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-developers/8d09195c-b15a-4d1c-9f5c-277b5af2df3cn%40googlegroups.com
> <https://groups.google.com/d/msgid/django-developers/8d09195c-b15a-4d1c-9f5c-277b5af2df3cn%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
--
You received this message because you are subscribed to the Google Groups
"Django developers (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-developers/CABD5YeECAyu49KimB9EdE%2BgrqaN208EfUWiFpdQF9Q3xRHdrgA%40mail.gmail.com.
