Merge "Don't recommend setting SESSION_COOKIE_HTTPONLY"

This commit is contained in:
Jenkins
2014-07-17 16:17:00 +00:00
committed by Gerrit Code Review

View File

@@ -210,7 +210,6 @@ following to ``local_settings.py``::
CSRF_COOKIE_SECURE = True CSRF_COOKIE_SECURE = True
SESSION_COOKIE_SECURE = True SESSION_COOKIE_SECURE = True
SESSION_COOKIE_HTTPONLY = True
Note that the CSRF_COOKIE_SECURE option is only available from Django 1.4. It Note that the CSRF_COOKIE_SECURE option is only available from Django 1.4. It
does no harm to have the setting in earlier versions, but it does not take effect. does no harm to have the setting in earlier versions, but it does not take effect.