Commit 12ac0bb9 authored by Erik Romijn's avatar Erik Romijn
Browse files

[1.5.x] Fixed #23149 -- Clarified note on HTTPOnly in cookie-based session docs 

Backport of e26366da from master.
parent 291e837b

docs/topics/http/sessions.txt

+1 −1
Original line number Diff line number Diff line
@@ -120,7 +120,7 @@ and the :setting:`SECRET_KEY` setting. 
.. note::



    It's recommended to leave the :setting:`SESSION_COOKIE_HTTPONLY` setting

    ``True`` to prevent tampering of the stored data from JavaScript.

    on ``True`` to prevent access to the stored data from JavaScript.



.. warning::