From 09f2dd652524bf78f79aac0e3bca90084fda45c4 Mon Sep 17 00:00:00 2001 From: Aryeh Gregor Date: Tue, 15 Apr 2008 14:06:55 +0000 Subject: [PATCH] Could we please have documentation for new config options? --- includes/DefaultSettings.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php index b0aef12516..02fa564c76 100644 --- a/includes/DefaultSettings.php +++ b/includes/DefaultSettings.php @@ -1496,6 +1496,11 @@ $wgCookieDomain = ''; $wgCookiePath = '/'; $wgCookieSecure = ($wgProto == 'https'); $wgDisableCookieCheck = false; + +/** + * Set authentication cookies to httpOnly to prevent stealing by JS, in brow- + * sers that support this feature. + */ $wgCookieHttpOnly = true; /** A list of cookies that vary the cache (for use by extensions) */ -- 2.20.1