Comment 1 for bug 1369876

Revision history for this message
Sam Betts (sambetts) wrote :

As far as I can tell in master right now SESSION_COOKIE_HTTPONLY = True which should add httponly to all session cookies.