[wp-trac] Re: [WordPress Trac] #7677: WordPress should implement HttpOnly Cookies to slow down XSS

[WordPress Trac]

#7677: WordPress should implement HttpOnly Cookies to slow down XSS
----------------------------------------------+-----------------------------
 Reporter:  _ck_                              |        Owner:  anonymous
     Type:  defect                            |       Status:  new      
 Priority:  high                              |    Milestone:  2.7      
Component:  Security                          |      Version:           
 Severity:  major                             |   Resolution:           
 Keywords:  cookies needs-patch dev-reviewed  |  
----------------------------------------------+-----------------------------
Comment (by ryan):

 Okay, how about a patch that adds ';HttpOnly' for the < 5.2 case that
 maintains the $secure argument?

-- 
Ticket URL: <http://trac.wordpress.org/ticket/7677#comment:12>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software