OpenStack Dashboard (Horizon)

  1. Bug #1369876
  2. Comment #3

Comment 3 for bug 1369876

Revision history for this message
Doug Fish (drfish) wrote :

reading more carefully, I see our docs don't mention CSRF_COOKIE_HTTPONLY so they aren't wrong. (They reference CSRF_COOKIE_SECURE) But also this suggests that no investigation has been done on potential side-effects.