Mercurial > p > roundup > code

diff CHANGES.txt @ 8168:3f0f4746dc7e

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
issue2551370 - prefix session cookie with __Secure- over https Limit use of roundup session cookie to HTTPS protocol by adding __Secure- prefix. Automatic testing includes http behavior only. Https behavious has been manually tested only. Need to be able to spin up an https server using wsgiref to test https behavior in CI. issue 2551373 opened to track automatic testing of https behavior.
author John Rouillard <rouilj@ieee.org>
date Tue, 26 Nov 2024 17:11:13 -0500
parents 25950b620246
children 627c5d6a0551
line wrap: on
line diff
--- a/CHANGES.txt	Tue Nov 26 15:25:01 2024 -0500
+++ b/CHANGES.txt	Tue Nov 26 17:11:13 2024 -0500
@@ -45,6 +45,8 @@
   one-by-one (using the check function) but instead offload the
   permission checks to the database. For SQL backends this performs the
   filtering in the database.  (Ralf Schlatterbeck)
+- issue2551370 - mark roundup session cookie with __Secure-
+  prefix. (John Rouillard)
 
 2024-07-13 2.4.0
Roundup Issue Tracker: http://roundup-tracker.org/