Added extra upgrade note about CSRF cookies [skip ci]

aihua · Mar 27, 2018 · ba9f038 · ba9f038
1 parent af24cf9
commit ba9f038
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/framework/UPGRADE.md b/framework/UPGRADE.md
@@ -153,6 +153,9 @@ Upgrade from Yii 2.0.13
   - Remove calls to `yii\BaseYii::powered()`.
   - If you are using XCache or Zend data cache, those are going away in 2.1 so you might want to start looking for an alternative.
 
+* In case you aren't using CSRF cookies (REST APIs etc.) you should turn them off explicitly by setting
+  `\yii\web\Request::$enableCsrfCookie` to `false` in your config file. 
+
 Upgrade from Yii 2.0.12
 -----------------------