From 2ea99cc8a5b729c6179169467aadfe88f0f6c0de Mon Sep 17 00:00:00 2001 From: Christophe Jaillet Date: Sat, 7 Mar 2020 07:17:13 +0000 Subject: [PATCH] Add compatibility notes and fix some small style issues. A link with a RFC would be welcomed, but apparenly this is only a draft (See [1]) r1874927 in trunk [skip ci] [1]: https://tools.ietf.org/id/draft-ietf-httpbis-rfc6265bis-03.html git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1874928 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/mod_usertrack.xml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/docs/manual/mod/mod_usertrack.xml b/docs/manual/mod/mod_usertrack.xml index bc383222704..48d22df5052 100644 --- a/docs/manual/mod/mod_usertrack.xml +++ b/docs/manual/mod/mod_usertrack.xml @@ -233,6 +233,7 @@ CustomLog "logs/clickstream.log" usertrack directory .htaccess +2.4.41 and later FileInfo @@ -245,20 +246,21 @@ CustomLog "logs/clickstream.log" usertrack CookieHTTPOnly Adds the 'HTTPOnly' attribute to the cookie -CookieHTTPOnlyon|off -CookieHTTPOnlyoff +CookieHTTPOnly on|off +CookieHTTPOnly off server config virtual host directory .htaccess +2.4.41 and later FileInfo

When set to 'ON', the 'HTTPOnly' cookie attribute is added to this modules tracking cookie. This attribute instructs browsers to block javascript - from reading the value of the cookie

+ from reading the value of the cookie.

@@ -273,13 +275,14 @@ CustomLog "logs/clickstream.log" usertrack directory .htaccess +2.4.41 and later FileInfo

When set to 'None', 'Lax', or 'Strict', the 'SameSite' cookie attribute is added to this modules tracking cookie with the corresponding value. This attribute instructs browser on how to treat the cookie when it is - requested in a cross-site context.

+ requested in a cross-site context.

A value of 'None' sets 'SameSite=None', which is the most liberal setting. To -- 2.47.3