View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0029027 | mantisbt | other | public | 2021-08-24 19:27 | 2025-09-26 04:21 |
| Reporter | aaribaud | Assigned To | community | ||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Product Version | 2.25.2 | ||||
| Target Version | 2.26.0 | Fixed in Version | 2.26.0 | ||
| Summary | 0029027: function gpc_set_cookie() ignores $p_httponly argument | ||||
| Description | Function gpc_set_cookie() provides an argument called $p_httponly which should determine whether the cookie being set has the HttpOnly flag. However, inside gps_set_cookie(), the setcookie call uses the constant value This causes all cookies to be HttpOnly, thus preventing use cases where Javascript would need to change the cookie value. | ||||
| Steps To Reproduce | Request a page which calls gpc_set_cookie() with value | ||||
| Tags | No tags attached. | ||||
