Author: markt Date: Fri Mar 27 14:44:29 2009 New Revision: 759158 URL: http://svn.apache.org/viewvc?rev=759158&view=rev Log: Replace httpOnly port with comphrensive cookie patch
Modified: tomcat/current/tc5.5.x/STATUS.txt Modified: tomcat/current/tc5.5.x/STATUS.txt URL: http://svn.apache.org/viewvc/tomcat/current/tc5.5.x/STATUS.txt?rev=759158&r1=759157&r2=759158&view=diff ============================================================================== --- tomcat/current/tc5.5.x/STATUS.txt (original) +++ tomcat/current/tc5.5.x/STATUS.txt Fri Mar 27 14:44:29 2009 @@ -37,15 +37,6 @@ +1: pero, markt, mturk -1: -* Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=44382 - Use HttpOnly for session cookies. This is enabled by default. Feel free to - caveat you vote with a preference for disabled by default. - http://svn.apache.org/viewvc?rev=694992&view=rev - +1: mark (prefer enabled, happy with disabled), rjung - -1: - rjung: slightly prefer disabled for 5.5.x because of stability reasons - and the risk of breaking existing apps. Happy with enabled for 6.0.x though. - * Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=45026 Never use empty reason phrase. http://svn.apache.org/viewvc?rev=697183&view=rev @@ -197,3 +188,9 @@ Patch provided by Chris Halstead +1: markt -1: + +* Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=46597 + Port all cookie changes from 6.0.x + https://issues.apache.org/bugzilla/attachment.cgi?id=23421 + +1: markt + -1: --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org