diff options
| author | Alex Gaynor <alex.gaynor@gmail.com> | 2018-04-15 21:23:47 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-04-15 21:23:47 (GMT) |
| commit | afbbac12a517818a1efa88f7bea18e82b68a79d4 (patch) | |
| tree | ac984c67db16a437ddb4973c1c67a31e648df8ac | |
| parent | 1a5c4bdb6ecc6a8b19ff33bde323ab188ed60977 (diff) | |
| download | cpython-afbbac12a517818a1efa88f7bea18e82b68a79d4.zip cpython-afbbac12a517818a1efa88f7bea18e82b68a79d4.tar.gz cpython-afbbac12a517818a1efa88f7bea18e82b68a79d4.tar.bz2 | |
Removed a confusing line from a docstring in http.cookies (GH-6482)
There's no reason a cookie should _ever_ contain pickled data. That's just asking for a critical security vulnerability. Back in Python2 there were helpers for doing that, but they're no more in Python3. Now coded_value is used when the value needs to be encoded for any reason.
| -rw-r--r-- | Lib/http/cookies.py | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/Lib/http/cookies.py b/Lib/http/cookies.py index 4a44db8..b2e995c 100644 --- a/Lib/http/cookies.py +++ b/Lib/http/cookies.py @@ -256,8 +256,7 @@ class Morsel(dict): In a cookie, each such pair may have several attributes, so this class is used to keep the attributes associated with the appropriate key,value pair. This class also includes a coded_value attribute, which is used to hold - the network representation of the value. This is most useful when Python - objects are pickled for network transit. + the network representation of the value. """ # RFC 2109 lists these attributes as reserved: # path comment domain |