Change default value of cookie_httponly

jderusse · jderusse · commit e6c8b6c2ca01 · 2015-07-27T09:40:03.000+02:00
diff --git a/reference/configuration/framework.rst b/reference/configuration/framework.rst
@@ -774,7 +774,7 @@ This determines whether cookies should only be sent over secure connections.
 cookie_httponly
 ...............
 
-**type**: ``boolean`` **default**: ``false``
+**type**: ``boolean`` **default**: ``true``
 
 This determines whether cookies should only be accessible through the HTTP
 protocol. This means that the cookie won't be accessible by scripting
