[issue23930] http.cookies.SimpleCookie doesn't parse comma-only separated cookies correctly

Change by Cheryl Sabella : -- stage: patch review -> resolved status: pending -> closed ___ Python tracker ___ ___ Python-bugs-list

[issue23930] http.cookies.SimpleCookie doesn't parse comma-only separated cookies correctly

Change by Martin Panter : -- resolution: -> rejected status: open -> pending ___ Python tracker ___ ___ Python-bugs-list mailing li

[issue23930] http.cookies.SimpleCookie doesn't parse comma-only separated cookies correctly

Martin Panter added the comment: I think making a comma start a new cookie is dangerous, and perhaps this proposal should be rejected. I’m not an expert on web programming, but this reminds me of some security problems that already affected Python:

[issue23930] http.cookies.SimpleCookie doesn't parse comma-only separated cookies correctly

Change by Rémi Lapeyre : -- keywords: +patch pull_requests: +9752 stage: -> patch review ___ Python tracker ___ ___ Python-bugs-list

[issue23930] http.cookies.SimpleCookie doesn't parse comma-only separated cookies correctly

Rémi Lapeyre added the comment: This is not a valid cookie string and I think neither Django nor Nginx would understand this cookie correctly. On the other hand, per RFC 6265 the comma is a forbidden character in a cookie value (https://tools.ietf.org/html/rfc6265#section-4.1.1): coo

[issue23930] http.cookies.SimpleCookie doesn't parse comma-only separated cookies correctly

Change by Rémi Lapeyre : -- nosy: +remi.lapeyre ___ Python tracker ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.p

[issue23930] http.cookies.SimpleCookie doesn't parse comma-only separated cookies correctly

Changes by Martin Panter : -- title: SimpleCookie doesn't parse comma-only separated cookies correctly -> http.cookies.SimpleCookie doesn't parse comma-only separated cookies correctly ___ Python tracker