From 2a29641097d6f42b94953a4328a29898662625c8 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Thu, 28 Aug 2008 16:09:58 -0400 Subject: Set cookies HttpOnly. --- IkiWiki/CGI.pm | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'IkiWiki') diff --git a/IkiWiki/CGI.pm b/IkiWiki/CGI.pm index a05043478..6f5d8aee6 100644 --- a/IkiWiki/CGI.pm +++ b/IkiWiki/CGI.pm @@ -14,9 +14,10 @@ sub printheader ($) { #{{{ if ($config{sslcookie}) { print $session->header(-charset => 'utf-8', - -cookie => $session->cookie(-secure => 1)); + -cookie => $session->cookie(-httponly => 1, -secure => 1)); } else { - print $session->header(-charset => 'utf-8'); + print $session->header(-charset => 'utf-8', + -cookie => $session->cookie(-httponly => 1)); } } #}}} -- cgit v1.2.3