> We would like to get the Powers that Be off our backs. Right now, it
> seems like our options are --
> 1) Install & monkey patch Trac 0.12.3

I'll leave the conversation about the 0.13 release to others... but
why don't you just apply the existing patch attached to that ticket to
the version of Trac you're already running?  I tried applying the
patch to 0.11.7 and 0.12.3 and it seems to apply cleanly (the change
is pretty simple)... so you should be able to just do an install from
source to get the necessary change. I'd think that's probably the
easiest solution. No reason to incur the risk of the upgrade to 0.12.3
if you'd rather wait for 0.13 anyway. :-)

Then all you need to do is update your trac.ini.

to the [trac] section add:
httponly_cookies = True

You should probably add your voice to the ticket increasing the
pressure to actually get this patch included in the core as well. :-)

Ben

-- 
You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.

Reply via email to