Skip to content

Commit

Permalink
Update index.md - secure flag for localhost cookies in Chrome (#28055)
Browse files Browse the repository at this point in the history
Update index.md - secure flag note for Chrome

Updated the note regarding behaviour of Chrome when setting the secure flag on cookies on localhost.
  • Loading branch information
toboid authored Jul 20, 2023
1 parent 1339566 commit 931c184
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion files/en-us/web/http/headers/set-cookie/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -157,7 +157,7 @@ Set-Cookie: <cookie-name>=<cookie-value>; Domain=<domain-value>; Secure; HttpOnl

> **Note:** Do not assume that `Secure` prevents all access to sensitive information in cookies (session keys, login details, etc.). Cookies with this attribute can still be read/modified either with access to the client's hard disk or from JavaScript if the `HttpOnly` cookie attribute is not set.
>
> Insecure sites (`http:`) cannot set cookies with the `Secure` attribute (since Chrome 52 and Firefox 52). For Firefox, the `https:` requirements are ignored when the `Secure` attribute is set by localhost (since Firefox 75).
> Insecure sites (`http:`) cannot set cookies with the `Secure` attribute (since Chrome 52 and Firefox 52). The `https:` requirements are ignored when the `Secure` attribute is set by localhost (since Chrome 89 and Firefox 75).
## Examples

Expand Down

0 comments on commit 931c184

Please sign in to comment.