php/yii2
1
0
Fork 0
mirror of https://github.com/yiisoft/yii2.git synced 2025-12-19 07:07:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

newline is required for correct rendering (#19707)

Browse Source
This commit is contained in:
nadar
2022-12-06 14:15:51 +01:00
committed by GitHub
parent 2fa83a71fe
commit b7f492da71
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/guide/runtime-sessions-cookies.md
View File

@@ -390,11 +390,13 @@ If the browser supports the `sameSite` setting it will only include the cookie a
You may read the [SameSite wiki article](https://owasp.org/www-community/SameSite) for more details.
For better security, an exception will be thrown if `sameSite` is used with an unsupported version of PHP.
To use this feature across different PHP versions check the version first. E.g.
```php
[
'sameSite' => PHP_VERSION_ID >= 70300 ? yii\web\Cookie::SAME_SITE_LAX : null,
]
```
> Note: Since not all browsers support the `sameSite` setting yet, it is still strongly recommended to also include
[additional CSRF protection](security-best-practices.md#avoiding-csrf).