diff options
Diffstat (limited to 'django')
| -rw-r--r-- | django/conf/global_settings.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/django/conf/global_settings.py b/django/conf/global_settings.py index 03aa87bf21..f3abfada25 100644 --- a/django/conf/global_settings.py +++ b/django/conf/global_settings.py @@ -460,7 +460,7 @@ SESSION_COOKIE_DOMAIN = None SESSION_COOKIE_SECURE = False # The path of the session cookie. SESSION_COOKIE_PATH = '/' -# Whether to use the non-RFC standard httpOnly flag (IE, FF3+, others) +# Whether to use the HttpOnly flag. SESSION_COOKIE_HTTPONLY = True # Whether to set the flag restricting cookie leaks on cross-site requests. # This can be 'Lax', 'Strict', or None to disable the flag. |