summaryrefslogtreecommitdiffstats
path: root/dist/changes-3.3.0-b1
Commit message (Expand)AuthorAgeFilesLines
* Update references to online documentation.Jason McDonald2009-08-121-1/+1
* Long live Qt!Lars Knoll2009-03-231-0/+284
t.git/patch/?id=0c07af230d016aab6e416ae57594189ab9953101'>patch) tree8c43ecdf2c622a8f5a9a6ee5bb96a36b9c90e3c5 parent4836d809f5dc3fc9e978ef630c0e5c8847c171a7 (diff)downloadQt-0c07af230d016aab6e416ae57594189ab9953101.zip
Qt-0c07af230d016aab6e416ae57594189ab9953101.tar.gz
Qt-0c07af230d016aab6e416ae57594189ab9953101.tar.bz2
cookie jar code: enhance security by keeping track of effective TLDs
The problem was the following: According to the cookie RFC, domains must have at least one dot in their name for setting a cookie (e.g. domain example.com can set a cookie for ".example.com" but not for ".com"). The problem is: Following this rule, one could still set "supercookies" for e.g. ".co.uk". The solution is to generate a table from http://publicsuffix.org which maintains a list of all "effective" TLDs like e.g. ".co.uk". Reviewed-by: Olivier Goffart Task-number: QTBUG-14706
Diffstat