requirements: Remove django-cookies-samesite.

Its functionality was added to Django upstream in 2.1.  Also remove
the SESSION_COOKIE_SAMESITE = 'Lax' setting since it’s the default.

Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
Anders Kaseorg
2020-09-14 16:06:07 -07:00
committed by Anders Kaseorg
parent dd68cc98fd
commit e84c7fb09f
5 changed files with 1 additions and 20 deletions

View File

@@ -397,8 +397,6 @@ REDIS_PASSWORD = get_secret('redis_password')
# SECURITY SETTINGS
########################################################################
SESSION_COOKIE_SAMESITE = 'Lax'
# Tell the browser to never send our cookies without encryption, e.g.
# when executing the initial http -> https redirect.
#