diff options
| author | Xtreak <tir.karthi@gmail.com> | 2019-03-10 02:09:48 (GMT) |
|---|---|---|
| committer | Ned Deily <nad@python.org> | 2019-03-10 02:09:48 (GMT) |
| commit | ca7fe5063593958e5efdf90f068582837f07bd14 (patch) | |
| tree | e35c37359dcb14d3784a0e177de2a3399cbf1b7a /Misc | |
| parent | 738c19f4c5475da186de03e966bd6648e5ced4c4 (diff) | |
| download | cpython-ca7fe5063593958e5efdf90f068582837f07bd14.zip cpython-ca7fe5063593958e5efdf90f068582837f07bd14.tar.gz cpython-ca7fe5063593958e5efdf90f068582837f07bd14.tar.bz2 | |
bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258)
Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy. Patch by Karthikeyan Singaravelan.
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS.d/next/Security/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Security/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst b/Misc/NEWS.d/next/Security/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst new file mode 100644 index 0000000..d2eb8f1 --- /dev/null +++ b/Misc/NEWS.d/next/Security/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst @@ -0,0 +1,4 @@ +Don't send cookies of domain A without Domain attribute to domain B +when domain A is a suffix match of domain B while using a cookiejar +with :class:`http.cookiejar.DefaultCookiePolicy` policy. Patch by +Karthikeyan Singaravelan. |