[wp-trac] [WordPress Trac] #28427: All cookies should be secure when `home` and `siteurl` use HTTPS
WordPress Trac
noreply at wordpress.org
Sun Jun 1 18:01:06 UTC 2014
#28427: All cookies should be secure when `home` and `siteurl` use HTTPS
-------------------------+-----------------------------
Reporter: johnbillion | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Security | Version:
Severity: minor | Keywords:
Focuses: |
-------------------------+-----------------------------
In the situation where a site is only served over SSL (ie. the `home` and
`siteurl` options use the HTTPS scheme) then all cookies should have the
`secure` flag set.
Currently the `secure` flag isn't set on the test cookie and the settings
cookies in this situation.
Somewhat related: #28426.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/28427>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list