[koha-commits] main Koha release repository branch new/bug_9102 created. v3.08.00-1519-ga51a78b

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, new/bug_9102 has been created
        at  a51a78b71c4ccd1be98c96d45ec162fb1ca00cd6 (commit)

- Log -----------------------------------------------------------------
commit a51a78b71c4ccd1be98c96d45ec162fb1ca00cd6
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Sun Nov 18 20:01:37 2012 +1300

    Bug 9102 : Set HttpOnly on the CGISESSID cookie
    
    https://www.owasp.org/index.php/HttpOnly
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    Signed-off-by: Katrin Fischer <Katrin.Fischer.83 at web.de>
    
    To test, use curl
    
    Before the patch
    
    % curl -I http://192.168.2.135
    HTTP/1.1 200 OK
    Date: Sun, 18 Nov 2012 06:56:49 GMT
    Server: Apache/2.2.22 (Ubuntu)
    Pragma: no-cache
    Cache-control: no-cache
    Content-script-type: text/javascript
    Content-style-type: text/css
    Set-Cookie: CGISESSID=19689f6e7d8ec94c25269fecebf2f009; path=/
    Vary: Accept-Encoding
    Content-Type: text/html; charset=UTF-8
    
    After patch
    
     % curl -I http://192.168.2.135
    HTTP/1.1 200 OK
    Date: Sun, 18 Nov 2012 07:01:04 GMT
    Server: Apache/2.2.22 (Ubuntu)
    Pragma: no-cache
    Cache-control: no-cache
    Content-script-type: text/javascript
    Content-style-type: text/css
    Set-Cookie: CGISESSID=da25baf03c0bc1e2c512a627028e43e6; path=/; HttpOnly
    Vary: Accept-Encoding
    Content-Type: text/html; charset=UTF-8
    Signed-off-by: Jared Camins-Esakov <jcamins at cpbibliography.com>

-----------------------------------------------------------------------


hooks/post-receive
-- 
main Koha release repository