Merge pull request #314 from nraychaudhuri/make_session_httpOnly_conf…

…igurable session.httpOnly is now configurable
playframework · May 16, 2012 · c2f4703 · c2f4703
2 parents d45c074 + b54ad70
commit c2f4703
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/framework/src/play/src/main/scala/play/api/mvc/Http.scala b/framework/src/play/src/main/scala/play/api/mvc/Http.scala
@@ -411,6 +411,7 @@ package play.api.mvc {
     override val isSigned = true
     override val secure = Play.maybeApplication.flatMap(_.configuration.getBoolean("session.secure")).getOrElse(false)
     override val maxAge = Play.maybeApplication.flatMap(_.configuration.getInt("session.maxAge")).getOrElse(-1)
+    override val httpOnly = Play.maybeApplication.flatMap(_.configuration.getBoolean("session.httpOnly")).getOrElse(true)
 
     def deserialize(data: Map[String, String]) = new Session(data)