Doc #55002 [NEW]: setcookie httponly parameter documentation problem

From: Operating system: All PHP version: 5.3.6 Package: Documentation problem Bug Type: Documentation Problem Bug description:setcookie httponly parameter documentation problem Description: ------------ --- From manual page: http://www.php.net/function.setcookie#Parameters --- In the description of @param httponly, the sentence "This setting can effectively help to reduce identity theft through XSS attacks (although it is not supported by all browsers)," is at best controversial and perhaps even misleading. It has been widely discussed so I let you research it with Google. --- Suggested remedy --- I would delete the sentence altogether and replace it with a simple reference to RFC 6265 http://www.rfc-editor.org/rfc/rfc6265.txt This keeps you out of the argument. Alternatively, use weasel words. Try: "This setting may help to reduce identity..." -- Edit bug report at http://bugs.php.net/bug.php?id=55002&edit=1 -- Try a snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=55002&r=trysnapshot52 Try a snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=55002&r=trysnapshot53 Try a snapshot (trunk): http://bugs.php.net/fix.php?id=55002&r=trysnapshottrunk Fixed in SVN: http://bugs.php.net/fix.php?id=55002&r=fixed Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=55002&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=55002&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=55002&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=55002&r=needscript Try newer version: http://bugs.php.net/fix.php?id=55002&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=55002&r=support Expected behavior: http://bugs.php.net/fix.php?id=55002&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=55002&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=55002&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=55002&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=55002&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=55002&r=dst IIS Stability: http://bugs.php.net/fix.php?id=55002&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=55002&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=55002&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=55002&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=55002&r=mysqlcfg