Skip to content

Commit aa91c37

Browse files
committed
Fixed a wrong explanation of the "httponly" option
1 parent 7e45958 commit aa91c37

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

cookbook/security/remember_me.rst

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,8 @@ The ``remember_me`` firewall defines the following configuration options:
8383

8484
``httponly``
8585
(default value: ``true``) If ``true``, the cookie associated with this
86-
feature is sent to the user exclusively through an HTTP non-secure connection.
86+
feature is accessible only through the HTTP protocol. This means that the
87+
cookie won't be accessible by scripting languages, such as JavaScript.
8788

8889
``remember_me_parameter``
8990
(default value: ``_remember_me``) The name of the form field checked to

0 commit comments

Comments
 (0)