r33373 MediaWiki - Code Review archive

Repository:MediaWiki
Revision:r33372‎ | r33373 | r33374 >
Date:17:17, 15 April 2008
Author:brion
Status:old
Tags:
Comment:
Temporarily put $wgCookieHttpOnly off while it's evaluated
Modified paths:
  • /trunk/phase3/includes/DefaultSettings.php (modified) (history)

Diff [purge]

Index: trunk/phase3/includes/DefaultSettings.php
@@ -1501,7 +1501,7 @@
15021502 * Set authentication cookies to httpOnly to prevent stealing by JS, in brow-
15031503 * sers that support this feature.
15041504 */
1505 -$wgCookieHttpOnly = true;
 1505+$wgCookieHttpOnly = false;
15061506
15071507 /** A list of cookies that vary the cache (for use by extensions) */
15081508 $wgCacheVaryCookies = array();

Status & tagging log