[1.5.x] Fixed #23149 -- Clarified note on HTTPOnly in cookie-based session docs
Backport of e26366da44
from master.
This commit is contained in:
parent
291e837bda
commit
12ac0bb91b
|
@ -120,7 +120,7 @@ and the :setting:`SECRET_KEY` setting.
|
|||
.. note::
|
||||
|
||||
It's recommended to leave the :setting:`SESSION_COOKIE_HTTPONLY` setting
|
||||
``True`` to prevent tampering of the stored data from JavaScript.
|
||||
on ``True`` to prevent access to the stored data from JavaScript.
|
||||
|
||||
.. warning::
|
||||
|
||||
|
|
Loading…
Reference in New Issue