Skip to content

bpo-29613: Added support for SameSite cookies #6413

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
alex merged 11 commits into from
Apr 7, 2018
Merged

bpo-29613: Added support for SameSite cookies #6413

Changes from 1 commit
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
89c0821
bpo-29613: Added support for SameSite cookies
akash0x53 Feb 21, 2017
3f1b130
Documented SameSite
akash0x53 Feb 21, 2017
7d69cd9
Missing space :(
akash0x53 Feb 21, 2017
b585315
Updated News and contributors
akash0x53 Feb 21, 2017
81446f6
Added version changed details.
akash0x53 Feb 22, 2017
21d0bda
Fix in documentation
akash0x53 Feb 22, 2017
cc06dd1
fix in documentation
akash0x53 Feb 22, 2017
dc750c3
Clubbed test cases for same attribute into single.
akash0x53 Feb 22, 2017
d496c01
Updates
alex Apr 7, 2018
dcd0afa
Style nits + expand tests
alex Apr 7, 2018
9259d2e
review feedback
alex Apr 7, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Added version changed details.
  • Loading branch information
@akash0x53 @alex
akash0x53 authored and alex committed Apr 7, 2018
commit 81446f6a4a67248fd5c8780b62df65468fe462fb
9 changes: 6 additions & 3 deletions Doc/library/http.cookies.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -143,9 +143,12 @@ Morsel Objects
in HTTP requests, and is not accessible through JavaScript. This is intended
to mitigate some forms of cross-site scripting.

The attribute :attr:`samesite` specifies that browser is not allowed to send the
cookie along with cross-site requests. This help to mitigate CSRF attacks. Valid
values for this attribute are "Strict" and "Lax".
.. versionchanged:: 3.7
Added support for :attr:`samesite` attribute.

The attribute :attr:`samesite` specifies that browser is not allowed to send the
cookie along with cross-site requests. This help to mitigate CSRF attacks. Valid
values for this attribute are "Strict" and "Lax".

The keys are case-insensitive and their default value is ``''``.

Expand Down