From 2a2522d8824c0852e30a7e3e07d46a543eb4b33d Mon Sep 17 00:00:00 2001 From: Taylor Otwell Date: Sun, 29 Mar 2020 10:38:29 -0500 Subject: [PATCH] fix wording --- config/session.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/session.php b/config/session.php index d0ccd5a8750..da692f3b8f7 100644 --- a/config/session.php +++ b/config/session.php @@ -188,7 +188,7 @@ | | This option determines how your cookies behave when cross-site requests | take place, and can be used to mitigate CSRF attacks. By default, we - | do not enable this as other CSRF protection services are in place. + | will set this value to "lax" since this is a secure default value. | | Supported: "lax", "strict", "none", null |