Clarify session.cookie_samesite="None"

diff --git a/php.ini-development b/php.ini-development
index c365201809dd1191e5570ab46cd7c3a799dbee81..b8ed4fb09439dde4ef379d1eec6cbabf32a2c2c9 100644 (file)
--- a/php.ini-development
+++ b/php.ini-development
@@ -1413,7 +1413,8 @@ session.cookie_domain =
 session.cookie_httponly =
 
 ; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF)
-; Current valid values are "Lax" or "Strict"
+; Current valid values are "Strict", "Lax" or "None". When using "None",
+; make sure to include the quotes, as `none` is interpreted like `false` in ini files.
 ; https://tools.ietf.org/html/draft-west-first-party-cookies-07
 session.cookie_samesite =
 

diff --git a/php.ini-production b/php.ini-production
index 5a68647ecacb348da8af9c14b0c62351811628c2..ee1ff0731deb0c4108dd7737bb4a00789b739ea1 100644 (file)
--- a/php.ini-production
+++ b/php.ini-production
@@ -1415,7 +1415,8 @@ session.cookie_domain =
 session.cookie_httponly =
 
 ; Add SameSite attribute to cookie to help mitigate Cross-Site Request Forgery (CSRF/XSRF)
-; Current valid values are "Lax" or "Strict"
+; Current valid values are "Strict", "Lax" or "None". When using "None",
+; make sure to include the quotes, as `none` is interpreted like `false` in ini files.
 ; https://tools.ietf.org/html/draft-west-first-party-cookies-07
 session.cookie_samesite =