Author: kkolinko Date: Fri Jan 7 20:45:24 2011 New Revision: 1056500 URL: http://svn.apache.org/viewvc?rev=1056500&view=rev Log: Withdraw proposals. Manager & HostManager using httpOnly=true is fine with me (r1041251). Let's not force this option by default.
Modified: tomcat/tc5.5.x/trunk/STATUS.txt tomcat/tc6.0.x/trunk/STATUS.txt Modified: tomcat/tc5.5.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc5.5.x/trunk/STATUS.txt?rev=1056500&r1=1056499&r2=1056500&view=diff ============================================================================== --- tomcat/tc5.5.x/trunk/STATUS.txt (original) +++ tomcat/tc5.5.x/trunk/STATUS.txt Fri Jan 7 20:45:24 2011 @@ -42,13 +42,6 @@ PATCHES PROPOSED TO BACKPORT: -O: jim -1: -* Configure Tomcat to use HttpOnly for session cookies by default - http://people.apache.org/~kkolinko/patches/2010-04-21_tc55_context_httpOnly.patch - +1: kkolinko - -0: markt - Consensus was for disabled in 5.5.x - http://svn.apache.org/viewvc?view=revision&revision=749019 - -1: - * Backport Windows installer improvements from Tomcat 7.0.5. See TC 6 proposal for details (r1035106). Modified: tomcat/tc6.0.x/trunk/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/STATUS.txt?rev=1056500&r1=1056499&r2=1056500&view=diff ============================================================================== --- tomcat/tc6.0.x/trunk/STATUS.txt (original) +++ tomcat/tc6.0.x/trunk/STATUS.txt Fri Jan 7 20:45:24 2011 @@ -45,13 +45,6 @@ PATCHES PROPOSED TO BACKPORT: and fix it later if needed? I think that actually nobody besides the release manager uses this, so I am letting this pass. -* Configure Tomcat to use HttpOnly for session cookies by default - http://people.apache.org/~kkolinko/patches/2010-04-21_tc6_context_httpOnly.patch - +1: kkolinko - -0: markt - There wasn't consensus previously. - - If you are going to change the default, do it in the code - -1: - * Expose the new WebappLoader flag in the VirtualWebappLoader, but allow alternative name searchVirtualFirst to make it consistent with the "virtual" terminology. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org