Doc'd HttpResponse.set_cookie()'s secure argument.

This commit is contained in:
Osaetin Daniel 2019-12-11 10:57:13 +01:00 committed by Mariusz Felisiak
parent 15c5875e69
commit 14e690ae5a
1 changed files with 2 additions and 0 deletions

View File

@ -819,6 +819,8 @@ Methods
``domain="example.com"`` will set a cookie that is readable by the ``domain="example.com"`` will set a cookie that is readable by the
domains www.example.com, blog.example.com, etc. Otherwise, a cookie will domains www.example.com, blog.example.com, etc. Otherwise, a cookie will
only be readable by the domain that set it. only be readable by the domain that set it.
* Use ``secure=True`` if you want the cookie to be only sent to the server
when a request is made with the ``https`` scheme.
* Use ``httponly=True`` if you want to prevent client-side * Use ``httponly=True`` if you want to prevent client-side
JavaScript from having access to the cookie. JavaScript from having access to the cookie.