We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9dd6af1 commit 9e11e68Copy full SHA for 9e11e68
README.md
@@ -371,7 +371,7 @@ Getting CSRF protection right is important, so here's some background:
371
approaches.
372
- Cookies are authenticated and based on the [securecookie](https://github.com/gorilla/securecookie)
373
library. They're also Secure (issued over HTTPS only) and are HttpOnly
374
- by default, because sane defaults are important.
+ by default, because sensible defaults are important.
375
- Cookie SameSite attribute (prevents cookies from being sent by a browser
376
during cross site requests) are not set by default to maintain backwards compatibility
377
for legacy systems. The SameSite attribute can be set with the SameSite option.
0 commit comments