﻿id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
31871	SESSION_COOKIE_SAMESITE comment in global_settings is outdated.	אורי	nobody	"https://github.com/django/django/blob/master/django/conf/global_settings.py#L472-L473 


{{{
# Whether to set the flag restricting cookie leaks on cross-site requests.
# This can be 'Lax', 'Strict', or None to disable the flag.
}}}

This is not what is written in  https://docs.djangoproject.com/en/3.1/ref/settings/#std:setting-SESSION_COOKIE_SAMESITE

As a side note, I understand that using `None` can also disable the flag - not only `False`, and I think this should be documented (since `None` was the way to disable the flag with Django <= 3.0 - so it should be documented that `None` still works like before)."	Cleanup/optimization	closed	Core (Other)	3.1	Normal	fixed			Ready for checkin	1	0	0	0	1	0
