Merge "Don't recommend setting SESSION_COOKIE_HTTPONLY"
This commit is contained in:
@@ -210,7 +210,6 @@ following to ``local_settings.py``::
|
|||||||
|
|
||||||
CSRF_COOKIE_SECURE = True
|
CSRF_COOKIE_SECURE = True
|
||||||
SESSION_COOKIE_SECURE = True
|
SESSION_COOKIE_SECURE = True
|
||||||
SESSION_COOKIE_HTTPONLY = True
|
|
||||||
|
|
||||||
Note that the CSRF_COOKIE_SECURE option is only available from Django 1.4. It
|
Note that the CSRF_COOKIE_SECURE option is only available from Django 1.4. It
|
||||||
does no harm to have the setting in earlier versions, but it does not take effect.
|
does no harm to have the setting in earlier versions, but it does not take effect.
|
||||||
|
Reference in New Issue
Block a user