3 ms·
There's not redirect trick, the cookies are just set to .github.com. I didn't say anything about JavaScript being disallowed, the cookies are HttpOnly. So I sa
by Harkins 18y ago
There's not redirect trick, the cookies are just set to .github.com.
I didn't say anything about JavaScript being disallowed, the cookies are HttpOnly. So I said that you can't do things on the server.
- defunkt 18y agoThe .github.com cookie is old and useless. You can't use it to do anything - it's a relic of our old authentication system. We should have made sure they were deleted before switching to the new cookie as it's caused some confusion. What mojombo said is accurate. (He's a GitHub co-founder and I'm the person who wrote the redirect code.)