Preserve HttpOnly flag when deleting session cookie

fixes #4485
2022-03-15 10:22:38 +01:00 · 2022-03-15 10:22:38 +01:00 · b707bf443a
commit b707bf443a
parent b655a9db30
2 changed files with 9 additions and 2 deletions
--- a/CHANGES.rst
+++ b/CHANGES.rst
@ -45,6 +45,8 @@ Unreleased
 -   When using lazy loading (the default with the debugger), the Click
    context from the ``flask run`` command remains available in the
    loader thread. :issue:`4460`
+-   Deleting the session cookie uses the ``httponly`` flag.
+    :issue:`4485`


 Version 2.0.3