| Graham Dumpleton (JIRA) 2007-01-14, 1:13 am |
| Investigate being able to create sessions as 'secure' or 'httponly'.
--------------------------------------------------------------------
Key: MODPYTHON-213
URL: https://issues.apache.org/jira/browse/MODPYTHON-213
Project: mod_python
Issue Type: Task
Components: session
Reporter: Graham Dumpleton
Priority: Minor
As per original request:
http://www.modpython.org/pipermail/...ber/022803.html
and subsequent discussion, investigate whether sessions should be able to be created such that the underlying cookie is using either the 'httponly' or 'secure' cookie attributes.
Note that the thread in the mailing list archive doesn't join together properly so you need to look for the similar subject lines in the thread index.
At the end of the discussion it wasn't completely clear how things would behave if these attributes were used and thus what the outcome would be so it wasn't pursued further.
|