mirror of
https://github.com/ansible/awx.git
synced 2026-01-10 15:32:07 -03:30
Flip CSRF_COOKIE_SECURE docs.
I think this was backwards.
This commit is contained in:
parent
f47325a532
commit
11b1d0e84c
@ -14,7 +14,7 @@ hijack cookies will only get the `session_id` itself, which does not imply any c
|
||||
a limited time, and can be revoked at any time.
|
||||
|
||||
> Note: The CSRF token will by default allow HTTP. To increase security, the `CSRF_COOKIE_SECURE` setting should
|
||||
be set to False.
|
||||
be set to True.
|
||||
|
||||
|
||||
## Usage
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user