Skip to content

Commit d931a1a

Browse files
committed
respond to feedback.
1 parent 5b22460 commit d931a1a

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

xml/System.Web/SameSiteMode.xml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,11 +19,11 @@
1919
2020
## Remarks
2121
22-
The <see cref="F:System.Web.SameSiteMode.None" /> value now causes ASP.NET to emit a SameSite cookie header in compliance with https://tools.ietf.org/html/draft-west-cookie-incrementalism-00 that browsers are in the process of adopting. As part of this change, FormsAuth and SessionState cookies will be issued with SameSite = 'Lax' instead of the previous default of 'None', though these values can be overridden in web.config.
22+
The behavior of <see cref="F:System.Web.SameSiteMode.None" /> was modified by updates described in [KB article 4531182](https://support.microsoft.com/help/4531182/kb4531182) and [KB article 4524421](https://support.microsoft.com/help/4524421/kb4524421).
2323
24-
Before these updates have been applied, the <see cref="F:System.Web.SameSiteMode.None" /> does not emit the `SameSite` cookie header.
24+
Without these updates, the <see cref="F:System.Web.SameSiteMode.None" /> value does not emit the `SameSite` cookie header. This conforms to [https://tools.ietf.org/html/draft-west-first-party-cookies-07#section-4.1](https://tools.ietf.org/html/draft-west-first-party-cookies-07#section-4.1).
2525
26-
For more information on this behavior see [KB article 4531182](https://support.microsoft.com/help/4531182/kb4531182) or [KB article 4524421](https://support.microsoft.com/help/4524421/kb4524421).
26+
After these updates have been applied, the <see cref="F:System.Web.SameSiteMode.None" /> value emits the `SameSite=None` cookie header. This new behavior conforms to [update](https://tools.ietf.org/html/draft-west-cookie-incrementalism-00). As part of this change, FormsAuth and SessionState cookies will be issued with SameSite = 'Lax' instead of the previous default of 'None', though these values can be overridden in web.config.
2727
2828
On systems where these updates have been applied, you can specify the previous behavior by setting the `SameSiteMode` to `(SameSiteMode)(-1)`.
2929
]]></format>

0 commit comments

Comments
 (0)