diff options
| author | Aymeric Augustin <aymeric.augustin@m4x.org> | 2013-02-07 09:48:08 +0100 |
|---|---|---|
| committer | Aymeric Augustin <aymeric.augustin@m4x.org> | 2013-02-07 09:48:08 +0100 |
| commit | 720888a14699a80a6cd07d32514b9dcd5b1005fb (patch) | |
| tree | ff67a0a1af00fc2568caf7544fddeaeb7258c352 /docs/ref/contrib | |
| parent | 6afc85af47f7d9f4494519de8842111734a61459 (diff) | |
Fixed #15808 -- Added optional HttpOnly flag to the CSRF Cookie.
Thanks Samuel Lavitt for the report and Sascha Peilicke for the patch.
Diffstat (limited to 'docs/ref/contrib')
| -rw-r--r-- | docs/ref/contrib/csrf.txt | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/docs/ref/contrib/csrf.txt b/docs/ref/contrib/csrf.txt index 3ad16e2f97..14522d8dbc 100644 --- a/docs/ref/contrib/csrf.txt +++ b/docs/ref/contrib/csrf.txt @@ -491,6 +491,7 @@ Settings A number of settings can be used to control Django's CSRF behavior: * :setting:`CSRF_COOKIE_DOMAIN` +* :setting:`CSRF_COOKIE_HTTPONLY` * :setting:`CSRF_COOKIE_NAME` * :setting:`CSRF_COOKIE_PATH` * :setting:`CSRF_COOKIE_SECURE` |