[Koha-bugs] [Bug 9102] [SECURITY] We should set httponly on our session cookie

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9102

Chris Cormack <chris at bigballofwax.co.nz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Needs Signoff               |Signed Off

--- Comment #11 from Chris Cormack <chris at bigballofwax.co.nz> ---
I think we should QA the first patch and push it, the second one should be safe
and essentially a no-op but is hard to test. So if we could push the first one
and then put this back to needs sign off

-- 
You are receiving this mail because:
You are watching all bug changes.