On wo, 2010-03-17 at 11:10 -0700, Yuchen Zhou wrote: > So does this ticket mean django now supports httponly cookies? And is > it by default httponly? > Or the application administrator has to turn it on?
The discussion on http://code.djangoproject.com/ticket/3304 indicates that neither python nor django at the moment support it and that django will need to implement its own cookie handling if it wants to continue supporting python versions as old as 2.4. There are patches attached to the issue, but none of those have been applied to django yet. -- Dennis K. The universe tends towards maximum irony. Don't push it. -- You received this message because you are subscribed to the Google Groups "Django developers" group. To post to this group, send email to django-develop...@googlegroups.com. To unsubscribe from this group, send email to django-developers+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/django-developers?hl=en.
