Incorrect link/terminology on Deploying Horizon page

[Travis McPeak]

On this page: https://github.com/openstack/horizon/blob/master/doc/source/topics/deployment.rst , towards the bottom in "Secure Site Recommendations", the text says "To help protect the session cookies from cross-site scripting add the following" and then proceeds to document settings which set the cookies to "secure".

Preventing from cross-site scripting is done by another cookie setting, HttpOnly. The link in this text also refers to OWASP HttpOnly.

Ideally sensitive cookies like sessionid and csrf tokens will be protected by both settings. In any case these two cookie options should be mentioned separately as they are both important and serve different purposes.

[Balaji Narayanan (lists-balajin)]

https://review.openstack.org/#/c/212326/1

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/212326
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=62a9d4320f0eb386467bca2908bcb81ce32d9472
Submitter: Jenkins
Branch: master

commit 62a9d4320f0eb386467bca2908bcb81ce32d9472
Author: Balaji Narayanan <email address hidden>
Date: Thu Aug 13 05:03:09 2015 +0000

    Fix XSS settings in Deployment Documentation

    Deployment document referenced the HTTPOnly setting but was pointing to
    Secure Cookies. Updated the document to reflect both HTTPOnly and Secure
    Cookie settings.

    Closes-Bug: #1431458

    Change-Id: I9117753e4295116184ecae22729db6d0ae629cf8