From 316178efe6308378f2b812f96a35f378c5003c08 Mon Sep 17 00:00:00 2001 From: Erik Romijn Date: Sat, 2 Aug 2014 18:59:27 +0200 Subject: [1.6.x] Fixed #23149 -- Clarified note on HTTPOnly in cookie-based session docs Backport of e26366da44bb343e7a95d01ff0dd18b8026c2802 from master. --- docs/topics/http/sessions.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/topics/http/sessions.txt b/docs/topics/http/sessions.txt index f808fe0584..43cfd77bc1 100644 --- a/docs/topics/http/sessions.txt +++ b/docs/topics/http/sessions.txt @@ -123,7 +123,7 @@ and the :setting:`SECRET_KEY` setting. .. note:: It's recommended to leave the :setting:`SESSION_COOKIE_HTTPONLY` setting - ``True`` to prevent tampering of the stored data from JavaScript. + on ``True`` to prevent access to the stored data from JavaScript. .. warning:: -- cgit v1.3