Temporarily put $wgCookieHttpOnly off while it's evaluated

diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index 02fa564..6486c99 100644 (file)
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -1501,7 +1501,7 @@ $wgDisableCookieCheck = false;
  * Set authentication cookies to httpOnly to prevent stealing by JS, in brow-
  * sers that support this feature.
  */
-$wgCookieHttpOnly = true;
+$wgCookieHttpOnly = false;
 
 /** A list of cookies that vary the cache (for use by extensions) */
 $wgCacheVaryCookies = array();