1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00

Deprecate ActionController::Response#set_cookie :http_only option infavor of :httponly

This commit is contained in:
Joshua Peek 2009-02-07 15:37:54 -06:00
parent 3c625d65e8
commit 0edb0a4fac
3 changed files with 5 additions and 2 deletions

View file

@ -41,7 +41,7 @@ module ActionController #:nodoc:
# * <tt>:expires</tt> - The time at which this cookie expires, as a Time object.
# * <tt>:secure</tt> - Whether this cookie is a only transmitted to HTTPS servers.
# Default is +false+.
# * <tt>:http_only</tt> - Whether this cookie is accessible via scripting or
# * <tt>:httponly</tt> - Whether this cookie is accessible via scripting or
# only HTTP. Defaults to +false+.
module Cookies
def self.included(base)

View file

@ -169,6 +169,9 @@ module ActionController # :nodoc:
def set_cookie(key, value)
if value.has_key?(:http_only)
ActiveSupport::Deprecation.warn(
"The :http_only option in ActionController::Response#set_cookie " +
"has been renamed. Please use :httponly instead.", caller)
value[:httponly] ||= value.delete(:http_only)
end

View file

@ -33,7 +33,7 @@ class CookieTest < ActionController::TestCase
end
def authenticate_with_http_only
cookies["user_name"] = { :value => "david", :http_only => true }
cookies["user_name"] = { :value => "david", :httponly => true }
end
def rescue_action(e)