Re: HTTP-Only Patch
| From: | steve | Date: | Mon, 07 Aug 2006 22:57:34 +0000 |
| Subject: | Re: HTTP-Only Patch | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-25240@lists.php.net to get a copy of this message | ||
Just a note -- having implemented and deployed this (in userspace, not
in php itself) -- setting the http_only flag kills the cookie in IE on
the Mac. One would hope no one is using such a thing anymore, but I
thought I'd point it out, and I'm definately in favor of the change.
Maybe it will get Mozilla to finally implement it (and deal with a
coookie file format change -- ooh, biggie).