mirror of
https://github.com/django/django.git
synced 2025-03-26 09:10:50 +00:00
[1.4.x] Fixed #23149 -- Clarified note on HTTPOnly in cookie-based session docs
Backport of e26366da44bb343e7a95d01ff0dd18b8026c2802 from master.
This commit is contained in:
parent
778a555342
commit
bc03817b42
@ -111,7 +111,7 @@ and the :setting:`SECRET_KEY` setting.
|
|||||||
.. note::
|
.. note::
|
||||||
|
|
||||||
It's recommended to leave the :setting:`SESSION_COOKIE_HTTPONLY` setting
|
It's recommended to leave the :setting:`SESSION_COOKIE_HTTPONLY` setting
|
||||||
``True`` to prevent tampering of the stored data from JavaScript.
|
on ``True`` to prevent access to the stored data from JavaScript.
|
||||||
|
|
||||||
.. warning::
|
.. warning::
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user