Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Submit upstream patch for HTTPOnly flag to sysauth cookie #44

Open
areynold opened this issue Nov 1, 2013 · 0 comments
Open

Submit upstream patch for HTTPOnly flag to sysauth cookie #44

areynold opened this issue Nov 1, 2013 · 0 comments
Labels
Security Upstream

Comments

@areynold
Copy link
Collaborator

areynold commented Nov 1, 2013

Per opentechinstitute/commotion-router#32, submit a patch request to luci's dispatcher.lua to use the httponly flag on sysauth cookies.

Although a working patch is available in /pull/28, the httponly and secure flags should probably be submitted as separate patches since openwrt does not use ssl by default.
@jheretic jheretic modified the milestone: 1.2 Jan 5, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Security Upstream
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@areynold @jheretic