summaryrefslogtreecommitdiff
path: root/doc/source/config.rst
diff options
context:
space:
mode:
Diffstat (limited to 'doc/source/config.rst')
-rw-r--r--doc/source/config.rst14
1 files changed, 14 insertions, 0 deletions
diff --git a/doc/source/config.rst b/doc/source/config.rst
index c271403..99ef8e6 100644
--- a/doc/source/config.rst
+++ b/doc/source/config.rst
@@ -160,6 +160,20 @@ It can either be ``enabled`` or ``disabled`` and can be used in ``simulation`` m
160 sp.cookie.name("my_cookie_name").encrypt(); 160 sp.cookie.name("my_cookie_name").encrypt();
161 sp.cookie.name("another_cookie_name").encrypt(); 161 sp.cookie.name("another_cookie_name").encrypt();
162 162
163
164Removing the user-agent part
165""""""""""""""""""""""""""""
166
167Some web browser extensions, such as [uMatrix](https://github.com/gorhill/uMatrix/wiki)
168might be configured to change the user-agent on a regular basis. If you think that
169some of your users might be using configurations like this, you might want to disable
170the mixing of the user-agent in the cookie's encryption key. The simplest way to do
171so is to set the environment variable ``HTTP_USER_AGENT`` to a fixed value before passing
172it to your php process.
173
174We think that this use case is too exotic to be worth implementing as a
175proper configuration directive.
176
163Choosing the proper environment variable 177Choosing the proper environment variable
164"""""""""""""""""""""""""""""""""""""""" 178""""""""""""""""""""""""""""""""""""""""
165 179