Files

Shilla Saebi 58c0654001 minor change to cookie rst file

removed unneccessary capitalization

Change-Id: I90cf3099fd343678061e883711fb2121662e6226

2015-08-13 15:51:47 -04:00

370 B

Raw Blame History

Cookies

Session cookies should be set to HTTPONLY:

SESSION_COOKIE_HTTPONLY = True

Never configure CSRF or session cookies to have a wild card domain with a leading dot. Horizon's session and CSRF cookie should be secured when deployed with HTTPS:

CSRF_COOKIE_SECURE = True
SESSION_COOKIE_SECURE = True

370 B Raw Blame History

Cookies

370 B

Raw Blame History