New submission from Grzegorz Sikorski:
I have a usecase when the server sends two cookies in separate `Set-Cookie`
headers. One of the cookie includes a `,` (comma). It seems this is not handled
properly, as the library always try to fold multiple headers with the same name
into a single comma-separated string. While this is valid for other header
fields, `Set-Cookie` should never be folded, as RFC 6265 says:
```
Origin servers SHOULD NOT fold multiple Set-Cookie header fields into
a single header field. The usual mechanism for folding HTTP headers
fields (i.e., as defined in [RFC2616]) might change the semantics of
the Set-Cookie header field because the %x2C (",") character is used
by Set-Cookie in a way that conflicts with such folding.
```
----------
components: Library (Lib)
messages: 278196
nosy: Grzegorz Sikorski
priority: normal
severity: normal
status: open
title: urllib2 does not handle cookies with `,`
type: behavior
_______________________________________
Python tracker <[email protected]>
<http://bugs.python.org/issue28378>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
