opencart/opencart — pull request #1264 by andyexeter (2014-03-17 14:52:31+00:00)
Title: Update session.php

Added php.ini directive session.cookie_httponly to help protect against XSS so javascript's document.cookie does not reveal the session ID