如何将会话cookie的HttpOnly设置为false？

Question

在Ruby on Rails中,如何将会话cookie的httpOnly设置为false？

Answer 1

在Rails 4中,您需要编辑 config/initializers/session_store.rb

Rails.application.config.session_store :cookie_store,
  key: '_my_app_session', httponly: false

Answer 2

我想通了.在/config/environment.rb包括这样的代码:

config.action_controller.session = { :httponly => false }

Answer 3

这是我用Rails 3做的:

Testapp::Application.config.session_store :cookie_store, key: '_testapp_session', :domain => :all, :httponly => false