[wp-trac] [WordPress Trac] #28427: All cookies should be secure when `home` and `siteurl` use HTTPS

WordPress Trac noreply at wordpress.org
Sun Jun 1 18:01:06 UTC 2014


#28427: All cookies should be secure when `home` and `siteurl` use HTTPS
-------------------------+-----------------------------
 Reporter:  johnbillion  |      Owner:
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  Awaiting Review
Component:  Security     |    Version:
 Severity:  minor        |   Keywords:
  Focuses:               |
-------------------------+-----------------------------
 In the situation where a site is only served over SSL (ie. the `home` and
 `siteurl` options use the HTTPS scheme) then all cookies should have the
 `secure` flag set.

 Currently the `secure` flag isn't set on the test cookie and the settings
 cookies in this situation.

 Somewhat related: #28426.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28427>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list