Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

There was a problem

You must be a member of this account.

Pelle Braendgaard

Pelle Braendgaard

Not a member

Pelle Braendgaard's latest activity

Tuesday, September 16 2008
1046 Http only cookies in CookieStore was updated in Ruby on Rails
  • Pelle Braendgaard
    Pelle Braendgaard commented at 5:25 PM

    Hmm. Dunno what went wrong there, anyway I created a new patch that I've actually test applied...

    I will start looking at http_only for regular sessions.
Monday, September 15 2008
1046 Http only cookies in CookieStore was updated in Ruby on Rails
  • Pelle Braendgaard
    Pelle Braendgaard commented at 8:23 PM

    I've updated the patch with support for the rack_process as well as better unit tests. While I was at it I added unit tests for the session_secure flag in the c...
  • Pelle Braendgaard
    Pelle Braendgaard commented at 1:04 PM

    I'll work on a group of comprehensive tests. I couldn't find a good starting point for testing it, but I will revisit it. It seems like the individual cookie se...
  • Pelle Braendgaard
    Pelle Braendgaard created the ticket at 12:32 PM

    While the cookie store is tamper proof. Abusive Javascript could still remove the session cookie or cause a TamperedWithCookie exception.

    This patch exposes a c...