Author: kkolinko
Date: Fri Jan  7 20:45:24 2011
New Revision: 1056500

URL: http://svn.apache.org/viewvc?rev=1056500&view=rev
Log:
Withdraw proposals.
Manager & HostManager using httpOnly=true is fine with me (r1041251). Let's not 
force this option by default.

Modified:
    tomcat/tc5.5.x/trunk/STATUS.txt
    tomcat/tc6.0.x/trunk/STATUS.txt

Modified: tomcat/tc5.5.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc5.5.x/trunk/STATUS.txt?rev=1056500&r1=1056499&r2=1056500&view=diff
==============================================================================
--- tomcat/tc5.5.x/trunk/STATUS.txt (original)
+++ tomcat/tc5.5.x/trunk/STATUS.txt Fri Jan  7 20:45:24 2011
@@ -42,13 +42,6 @@ PATCHES PROPOSED TO BACKPORT:
   -O: jim
   -1:
 
-* Configure Tomcat to use HttpOnly for session cookies by default
-  
http://people.apache.org/~kkolinko/patches/2010-04-21_tc55_context_httpOnly.patch
-  +1: kkolinko
-  -0: markt - Consensus was for disabled in 5.5.x
-              http://svn.apache.org/viewvc?view=revision&revision=749019
-  -1:
-
 * Backport Windows installer improvements from Tomcat 7.0.5.
 
   See TC 6 proposal for details (r1035106).

Modified: tomcat/tc6.0.x/trunk/STATUS.txt
URL: 
http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1056500&r1=1056499&r2=1056500&view=diff
==============================================================================
--- tomcat/tc6.0.x/trunk/STATUS.txt (original)
+++ tomcat/tc6.0.x/trunk/STATUS.txt Fri Jan  7 20:45:24 2011
@@ -45,13 +45,6 @@ PATCHES PROPOSED TO BACKPORT:
       and fix it later if needed? I think that actually nobody besides the 
release manager
       uses this, so I am letting this pass.
 
-* Configure Tomcat to use HttpOnly for session cookies by default
-  
http://people.apache.org/~kkolinko/patches/2010-04-21_tc6_context_httpOnly.patch
-  +1: kkolinko
-  -0: markt - There wasn't consensus previously.
-            - If you are going to change the default, do it in the code
-  -1:
-
 * Expose the new WebappLoader flag in the VirtualWebappLoader,
   but allow alternative name searchVirtualFirst to make it
   consistent with the "virtual" terminology.



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to