path: root/Misc/NEWS.d/next/Security/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst

Don't send cookies of domain A without Domain attribute to domain B
when domain A is a suffix match of domain B while using a cookiejar
with :class:`http.cookiejar.DefaultCookiePolicy` policy. Patch by
Karthikeyan Singaravelan.