[Koha-bugs] [Bug 29957] Cookies not removed after logout

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29957

--- Comment #77 from Marcel de Rooy <m.de.rooy at rijksmuseum.nl> ---
(In reply to Jonathan Druart from comment #76)
> Only Martin and me so far (comments #14 and #15)
> The problem is: how do you maintain it? I am assuming that we want to clear
> a cookie by default, so how sysops will maintain this list up-to-date? They
> will have to know if a new cookie has been added to a given version. Seems a
> nightmare.

It might indeed be easier to add KohaOpacLanguage as an entry on the deny list.

> I am not aware of cookies we want to keep in Koha after a logout. We proved
> earlier that even "language" was not a good pick.

I am not sure how solid that 'proof' actually is. It still seems to me that
language is the best example for having differentiation. We should not assume
that browser language e.g. is available in OPAC or automatically matches the
user's preference. That is the main reason for having such a cookie.

-- 
You are receiving this mail because:
You are watching all bug changes.