Website owners will now be required to add explicit attributes to third-party cookies that can be used on other sites. Reference: https://digiday.jp/platforms/what-is-chrome-samesite/
django/http/response.py
def set_cookie(self, key, value='', max_age=None, expires=None, path='/',
domain=None, secure=False, httponly=False, samesite=None):
...
if samesite:
if samesite.lower() not in ('lax', 'none', 'strict'):
raise ValueError('samesite must be "lax", "none" or "strict".')
self.cookies[key]['samesite'] = samesite
...
Reference: https://github.com/django/django/commit/b33bfc383935cd26e19a2cf71d066ac6edd1425f#diff-eeebc8cb56240caf13a9952431189fef
But this is not in the latest 3.0.2
Recommended Posts