[wp-trac] Re: [WordPress Trac] #7677: WordPress should implement HttpOnly Cookies to slow down XSS

[WordPress Trac]

#7677: WordPress should implement HttpOnly Cookies to slow down XSS
---------------------------------+------------------------------------------
 Reporter:  _ck_                 |        Owner:  anonymous
     Type:  defect               |       Status:  new      
 Priority:  high                 |    Milestone:  2.7      
Component:  Security             |      Version:           
 Severity:  major                |   Resolution:           
 Keywords:  cookies needs-patch  |  
---------------------------------+------------------------------------------
Comment (by ryan):

 westi, I think AJAX requests can still send httponly cookies, but they
 shouldn't be allowed to read them.  Firefox allows reading them though:
 https://bugzilla.mozilla.org/show_bug.cgi?id=380418

-- 
Ticket URL: <http://trac.wordpress.org/ticket/7677#comment:3>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software