[Pkg-mailman-hackers] Bug#606269: mailman: Mailman should allow users to set the secure flag on cookies

[Daniel Kahn Gillmor]

Package: mailman
Severity: normal
Tags: patch

Mailman offers a web interface that relies heavily on cookies.

If the web interface is used via https, those cookies should have the
secure flag set.

Attached is a patch which allows system administrators to indicate
manually whether they would like the secure flag to be set or not.

Feel free to forward upstream, if that would be useful.

     --dkg

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.36-trunk-686 (SMP w/1 CPU core)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
-------------- next part --------------
A non-text attachment was scrubbed...
Name: allow-secure-cookies-setting.patch
Type: text/x-diff
Size: 1044 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mailman-hackers/attachments/20101207/9b1de67f/attachment.patch>