Senthil Kumaran <sent...@uthcode.com> added the comment:

I tested with apache to set ":" in names and then verified the behavior in 
browsers and it looks like it fine to allow ":" as legal character in cookie 
name ( though RFC originally does say that). My guess is previously it could 
have been thought that ":" might hinder parsing, but does not seem so as how 
Cookie name=value;name2=values2 have evolved.

So in 3.3, I have made the change to just allow ":" in Cookie Name. But as 
previous versions raised CookieError error, I see this is a change in behavior 
and it should not be back-ported.

In Docs 2.7,3.2 etc, I see the mention that users should look for and catch 
CookieError if they are capturing cookies from unknown sources, in case if it 
contains any illegal characters. That still applies to other illegal 
characters. I think, the docs could just be updated with mention of illegal 
characters in python versions to be little more helpful and with that, this 
issue can be closed.

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue2193>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to