Merge "WebView: deprecate 'Secure' cookies for insecure schemes" (d73f4e38) · Commits · e / os / android_frameworks_base

core/java/android/webkit/CookieManager.java

+6 −0

Original line number	Diff line number	Diff line
		@@ -102,6 +102,9 @@ public abstract class CookieManager {
		* path and name will be replaced with the new cookie. The cookie being set
		* will be ignored if it is expired.
		*
		* <p class="note"><b>Note:</b> if specifying a {@code value} containing the {@code "Secure"}
		* attribute, {@code url} must use the {@code "https://"} scheme.
		*
		* @param url the URL for which the cookie is to be set
		* @param value the cookie as a string, using the format of the 'Set-Cookie'
		* HTTP response header
		@@ -122,6 +125,9 @@ public abstract class CookieManager {
		* completes or whether it succeeded, and in this case it is safe to call the method from a
		* thread without a Looper.
		*
		* <p class="note"><b>Note:</b> if specifying a {@code value} containing the {@code "Secure"}
		* attribute, {@code url} must use the {@code "https://"} scheme.
		*
		* @param url the URL for which the cookie is to be set
		* @param value the cookie as a string, using the format of the 'Set-Cookie'
		* HTTP response header