From 34f73b005b44849ad8c4e2cb7902b40165acce3b 2010-06-19 23:03:12
From: Eric Davis <edavis@littlestreamsoftware.com>
Date: 2010-06-19 23:03:12
Subject: [PATCH] Merged r3785 from trunk.

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/branches/0.9-stable@3795 e93f8b46-1217-0410-a6f0-8f06a7374b81

---

diff --git a/lib/tasks/initializers.rake b/lib/tasks/initializers.rake
index ce87475..cec5572 100644
--- a/lib/tasks/initializers.rake
+++ b/lib/tasks/initializers.rake
@@ -17,6 +17,13 @@ file 'config/initializers/session_store.rb' do
 # you'll be exposed to dictionary attacks.
 ActionController::Base.session = {
   :session_key => '_redmine_session',
+  #
+  # Uncomment and edit the :session_path below if are hosting your Redmine
+  # at a suburi and don't want the top level path to access the cookies
+  #
+  # See: http://www.redmine.org/issues/3968
+  #
+  # :session_path => '/url_path_to/your/redmine/',
   :secret => '#{secret}'
 }
 EOF