mirror of
https://github.com/django/django.git
synced 2025-11-07 07:15:35 +00:00
Fixed #20972 -- Make messages cookie follow session cookie secure/httponly
This commit is contained in:
@@ -214,6 +214,10 @@ Minor features
|
||||
* The :ttag:`widthratio` template tag now accepts an "as" parameter to capture
|
||||
the result in a variable.
|
||||
|
||||
* The backends for :mod:`django.contrib.messages` that use cookies, will now
|
||||
follow the :setting:`SESSION_COOKIE_SECURE` and
|
||||
:setting:`SESSION_COOKIE_HTTPONLY` settings.
|
||||
|
||||
Backwards incompatible changes in 1.7
|
||||
=====================================
|
||||
|
||||
|
||||
Reference in New Issue
Block a user