django/django — pull request #115 by ptone (2012-02-24 23:51:54+00:00)
Title: clarified impact of httponly in terms of JS usage

This change impacts anyone accessing the session data from Javascript, for example, when relaying the session ID into a querystring in the case of flash uploading tools. I'm not opening a debate on whether this is proper to do or not, just that it will help people understand possible impacts of this change when using other people's code that may do this (as happened to me).