From 28dba9f1f753144798829c3612f5c4985234f14f Mon Sep 17 00:00:00 2001 From: Brion Vibber Date: Tue, 15 Apr 2008 17:17:30 +0000 Subject: [PATCH] Temporarily put $wgCookieHttpOnly off while it's evaluated --- includes/DefaultSettings.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index 02fa564c76..6486c99b00 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -1501,7 +1501,7 @@ $wgDisableCookieCheck = false; * Set authentication cookies to httpOnly to prevent stealing by JS, in brow- * sers that support this feature. */ -$wgCookieHttpOnly = true; +$wgCookieHttpOnly = false; /** A list of cookies that vary the cache (for use by extensions) */ $wgCacheVaryCookies = array(); -- 2.20.1