Skip to content

Commit

Permalink
just call it tamper resistant
Browse files Browse the repository at this point in the history
  • Loading branch information
kraih committed Dec 2, 2015
1 parent 6ba2bcb commit e1f1e06
Show file tree
Hide file tree
Showing 3 changed files with 5 additions and 5 deletions.
2 changes: 1 addition & 1 deletion Changes
@@ -1,5 +1,5 @@

6.35 2015-12-02
6.35 2015-12-03
- Removed deprecated collecting method from Mojo::UserAgent::CookieJar.
- Fixed warnings in Mojo::Cookie::Response.

Expand Down
6 changes: 3 additions & 3 deletions lib/Mojolicious/Guides/Growing.pod
Expand Up @@ -406,8 +406,8 @@ L<Mojolicious/"secrets">.

$app->secrets(['Mojolicious rocks']);

This passphrase is used by the HMAC-SHA1 algorithm to make signed cookies
secure and can be changed at any time to invalidate all existing sessions.
This passphrase is used by the HMAC-SHA1 algorithm to make signed cookies tamper
resistant and can be changed at any time to invalidate all existing sessions.

$c->session(user => 'sebastian');
my $user = $c->session('user');
Expand Down Expand Up @@ -445,7 +445,7 @@ this.
use lib 'lib';
use MyApp::Model::Users;

# Make signed cookies secure
# Make signed cookies tamper resistant
app->secrets(['Mojolicious rocks']);

helper users => sub { state $users = MyApp::Model::Users->new };
Expand Down
2 changes: 1 addition & 1 deletion lib/Mojolicious/Guides/Tutorial.pod
Expand Up @@ -734,7 +734,7 @@ client-side, with a cryptographic signature to prevent tampering.
Counter: <%= session 'counter' %>

Note that you should use custom L<Mojolicious/"secrets"> to make signed cookies
really secure.
really tamper resistant.

app->secrets(['My secret passphrase here']);

Expand Down

0 comments on commit e1f1e06

Please sign in to comment.