jro_apps/redmine Commit - r4637:507f9d753f56

Set the httponly flag on the autologin cookie....

Jean-Philippe Lang -

r4637:507f9d753f56

parent child

Context file:

r4637:507f9d753f56

app/controllers/account_controller.rb +2 -1

                    :value => token.value,
                    :expires => 1.year.from_now,
                    :path => (Redmine::Configuration['autologin_cookie_path'] || '/'),
-                   :secure => (Redmine::Configuration['autologin_cookie_secure'] ? true : false)
+                   :secure => (Redmine::Configuration['autologin_cookie_secure'] ? true : false),
+                   :httponly => true
                  }
                  cookies[cookie_name] = cookie_options
                end

General Comments 0

You need to be logged in to leave comments. Login now

No TODOs yet

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages