summaryrefslogtreecommitdiff
path: root/docs/ref
diff options
context:
space:
mode:
Diffstat (limited to 'docs/ref')
-rw-r--r--docs/ref/request-response.txt2
1 files changed, 2 insertions, 0 deletions
diff --git a/docs/ref/request-response.txt b/docs/ref/request-response.txt
index 18431d8be0..45d4bab418 100644
--- a/docs/ref/request-response.txt
+++ b/docs/ref/request-response.txt
@@ -821,6 +821,8 @@ Methods
``domain="example.com"`` will set a cookie that is readable by the
domains www.example.com, blog.example.com, etc. Otherwise, a cookie will
only be readable by the domain that set it.
+ * Use ``secure=True`` if you want the cookie to be only sent to the server
+ when a request is made with the ``https`` scheme.
* Use ``httponly=True`` if you want to prevent client-side
JavaScript from having access to the cookie.