Use $wgSecureCookie to decide whether to actually mark secure cookies as 'secure'
authorBrad Jorsch <bjorsch@wikimedia.org>
Mon, 25 Jan 2016 19:15:40 +0000 (14:15 -0500)
committerBrad Jorsch <bjorsch@wikimedia.org>
Mon, 25 Jan 2016 19:25:09 +0000 (14:25 -0500)
commit4eeff5b559e2ae7b8fa1f45572968ba28573a421
tree6aef2cc5a30b5c01ded357184ed699165a38adfb
parent7491b52f700e220814a8190781fd794b4dd88a20
Use $wgSecureCookie to decide whether to actually mark secure cookies as 'secure'

The pre-SessionManager code did this, and the change in combination with
the API not honoring forceHTTPS led to T124252.

Bug: T124252
Change-Id: Ic6a79fbb30491040facd7c200b1f47d6b99ce637
includes/session/CookieSessionProvider.php
tests/phpunit/includes/session/CookieSessionProviderTest.php