summaryrefslogtreecommitdiffstats
path: root/Lib/test/test_http_cookies.py
Commit message (Collapse)AuthorAgeFilesLines
* bpo-991266: Fix quoting of Comment attribute of SimpleCookie (GH-6555)Berker Peksag2018-04-221-0/+10
|
* bpo-29613: Added support for SameSite cookies (GH-6413)Alex Gaynor2018-04-071-0/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * bpo-29613: Added support for SameSite cookies Implemented as per draft https://tools.ietf.org/html/draft-west-first-party-cookies-07 * Documented SameSite And suggestions by members. * Missing space :( * Updated News and contributors * Added version changed details. * Fix in documentation * fix in documentation * Clubbed test cases for same attribute into single. * Updates * Style nits + expand tests * review feedback
* bpo-29919: Remove unused imports found by pyflakes (#137)Victor Stinner2017-03-271-2/+2
| | | Make also minor PEP8 coding style fixes on modified imports.
* Issue #29192: Removed deprecated features in the http.cookies module.Serhiy Storchaka2017-01-131-15/+7
|
* Issue #26302: Correctly identify comma as an invalid character for a cookie ↵Anish Shah2016-02-071-0/+6
| | | | (correcting regression in Python 3.5).
* merge 3.4 (#22931)Benjamin Peterson2015-05-231-0/+13
|\
| * merge 3.3 (#22931)Benjamin Peterson2015-05-231-0/+13
| |\
| | * merge 3.2 (#22931)Benjamin Peterson2015-05-231-0/+13
| | |\
| | | * allow square brackets in cookie values (closes #22931)Benjamin Peterson2015-05-231-0/+14
| | | |
| | | * Lax cookie parsing in http.cookies could be a security issue when combinedAntoine Pitrou2014-09-161-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | with non-standard cookie handling in some Web browsers. Reported by Sergey Bobrov.
* | | | #2211: properly document the Morsel behavior changes.R David Murray2015-03-291-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Also deprecate the undocumented set argument instead of removing it already in 3.5. Initial patch by Demian Brecht.
* | | | Restored backward compatibility of pickling http.cookies.Morsel. It wasSerhiy Storchaka2015-03-181-0/+20
| | | | | | | | | | | | | | | | broken after converting instance attributes to properies in issue #2211.
* | | | Issue #2211: Updated the implementation of the http.cookies.Morsel class.Serhiy Storchaka2015-03-181-0/+179
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Setting attributes key, value and coded_value directly now is deprecated. update() and setdefault() now transform and check keys. Comparing for equality now takes into account attributes key, value and coded_value. copy() now returns a Morsel, not a dict. repr() now contains all attributes. Optimized checking keys and quoting values. Added new tests. Original patch by Demian Brecht.
* | | | merge 3.4 (#22986)Benjamin Peterson2015-01-171-2/+2
|\ \ \ \ | |/ / /
| * | | capitialize "HttpOnly" and "Secure" as they appear in the standard and other ↵Benjamin Peterson2015-01-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | impls (closes #23250) Patch by Jon Dufresne.
* | | | Issue #22796: HTTP cookie parsing is now stricter, in order to protect ↵Antoine Pitrou2014-11-211-8/+4
|/ / / | | | | | | | | | against potential injection attacks.
* | | Issue #22775: Fixed unpickling of http.cookies.SimpleCookie with protocol 2Serhiy Storchaka2014-11-021-1/+14
|/ / | | | | | | and above. Patch by Tim Graham.
* | Lax cookie parsing in http.cookies could be a security issue when combinedAntoine Pitrou2014-09-161-0/+9
| | | | | | | | | | | | with non-standard cookie handling in some Web browsers. Reported by Sergey Bobrov.
* | #16611: BaseCookie now parses 'secure' and 'httponly' flags.R David Murray2013-08-251-1/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | Previously it generated them if they were given a value, but completely ignored them if they were present in the string passed in to be parsed. Now if the flag appears on a cookie, the corresponding Morsel key will reference a True value. Other pre-existing behavior is retained in this maintenance patch: if the source contains something like 'secure=foo', morsel['secure'] will return 'foo'. Since such a value doesn't round trip and never did (and would be a surprising occurrence) a subsequent non-bug-fix patch may change this behavior. Inspired by a patch from Julien Phalip, who reviewed this one.
* | Issue #14426: Correct the Date format in Expires attribute of Set-Cookie. ↵Senthil Kumaran2012-05-201-4/+4
|\ \ | |/ | | | | Patch by Federico Reghenzani and Müte Invert
| * Issue #14426: Correct the Date format in Expires attribute of Set-Cookie. ↵Senthil Kumaran2012-05-201-4/+4
| | | | | | | | Patch by Federico Reghenzani and Müte Invert
* | Fix Issue2193 - Allow ":" character in Cookie NAME valuesSenthil Kumaran2012-04-221-0/+9
|/
* #9824: encode , and ; in cookie values so that browsers don't split on themR. David Murray2010-12-281-0/+8
| | | | | | | | There is a small chance of backward incompatibility here, but only for non-SimpleCookie applications reading SimpleCookie generated cookies. Even then, any such ap is likely to be handling escaped values already, and it would take a fairly perverse implementation of unescaping to fail to unescape these newly escaped chars, so the risk seems minimal.
* #8826: the "expires" attribute value is a date string with spaces, but ↵Georg Brandl2010-08-011-0/+10
| | | | apparently not all user-agents put it in quotes. Handle that as a special case.
* #3788: more tests for http.cookies, now at 95% coverage. Also bring coding ↵Georg Brandl2010-07-311-17/+98
| | | | style in the module up to PEP 8, where it does not break backwards compatibility.
* Fix the warnings filter usage in test_http_cookies.Brett Cannon2010-03-201-4/+11
|
* Fixing the issue4860. Escaping the embedded '"' in the js_output method of ↵Senthil Kumaran2009-04-021-4/+4
| | | | Morsel class.
* Remove deprecated SmartCookie and SerialCookie classes.Georg Brandl2008-05-281-1/+0
|
* Create http package. #2883.Georg Brandl2008-05-261-0/+82
generated by cgit v0.12 at 2024-11-28 08:01:37 (GMT)