]> granicus.if.org Git - apache/blobdiff - modules/mappers/mod_rewrite.c
* Allow HttpOnly, 1 and true to enable HttpOnly, allow secure, 1 and true
[apache] / modules / mappers / mod_rewrite.c
index 4abf898db624decbb5a901d75e45df36e0d2c00f..10e50dd9bf9b0a15ce02a67d6cc6b7e59b59b73d 100644 (file)
@@ -2493,10 +2493,14 @@ static void add_cookie(request_rec *r, char *s)
                                  expires ? "; expires=" : NULL,
                                  expires ? exp_time : NULL,
                                  (secure && (!strcasecmp(secure, "true")
-                                             || !strcasecmp(secure, "1"))) ?
+                                             || !strcmp(secure, "1")
+                                             || !strcasecmp(secure,
+                                                            "secure"))) ?
                                   "; secure" : NULL,
                                  (httponly && (!strcasecmp(httponly, "true")
-                                               || !strcasecmp(httponly, "1"))) ?
+                                               || !strcmp(httponly, "1")
+                                               || !strcasecmp(httponly,
+                                                              "HttpOnly"))) ?
                                   "; HttpOnly" : NULL,
                                  NULL);