Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • Framadate Framadate
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 53
    • Merge requests 53
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • Framasoft
  • Framadate
  • FramadateFramadate
  • Issues
  • #236

Closed
Open
Created Jul 03, 2017 by Pierre Rudloff@Rudloff

Cookies HttpOnly

Bonjour,

Il semblerait que les cookies de session de Framadate n'utilisent pas le flag HttpOnly. Vu qu'a priori on n'a pas besoin d'y accéder via JavaScript, ça serait je pense une bonne pratique de l'activer (cf. aussi cette recommandation de Mozilla).

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking