mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00
Code Issues 32 Releases Wiki Activity

[2.2.x] Updated spelling and RFCs in HttpOnly cookie flag docs.

Browse Source 
Backport of 398afba084 from master.
This commit is contained in:
Nick Pope
2018-06-25 14:21:21 +01:00
committed by Tim Graham
parent c04bd386d4
commit d7876fc999
4 changed files with 14 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
django/conf/global_settings.py
View File

@@ -460,7 +460,7 @@ SESSION_COOKIE_DOMAIN = None
SESSION_COOKIE_SECURE = False
# The path of the session cookie.
SESSION_COOKIE_PATH = '/'
# Whether to use the non-RFC standard httpOnly flag (IE, FF3+, others)
# Whether to use the HttpOnly flag.
SESSION_COOKIE_HTTPONLY = True
# Whether to set the flag restricting cookie leaks on cross-site requests.
# This can be 'Lax', 'Strict', or None to disable the flag.