[ckan-dev] The 'ckan' cookie

Mark Gregson mark.gregson at linkdigital.com.au
Tue May 3 04:32:45 UTC 2016


I've occasionally seen a 'ckan' cookie when I'm using CKAN and I've noted
that it's not set to HttpOnly.

I just had one for demo.ckan.org but it wasn't recreated after I deleted
it, even after logging in. What is the purpose of the 'ckan' cookie, when
is it set and is there a rationale for it not being set to HttpOnly?

Cheers
Mark


*MARK GREGSON * |  *DEVELOPMENT TEAM LEAD*
Link Digital

www.linkdigital.com.au
p: *02 6111 2907* | f: 02 6248 5582
GPO Box 199 Canberra ACT 2601
5/32 Lonsdale Street Braddon ACT 2612
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20160503/a6f92591/attachment-0002.html>


More information about the ckan-dev mailing list