5 Feb
2007
5 Feb
'07
11:09 a.m.
Hi, sounds plausible, thanks for the reply :) mark On 2/1/07, Martijn Pieters <mj@zopatista.com> wrote:
On 1/31/07, mark hellewell <mark.hellewell@gmail.com> wrote:
and was wondering why the auth cookie is deleted from the request every time?
The cookie information is removed from the request, the cookie itself still remains in the browser cookie store for the next request. I assume that removing it keeps other Zope code (which may be untrusted) from snooping on that information. In other words, it's a security measure.
-- Martijn Pieters