Bug in http-cookies v6.00 [rt.cpan.org #72761]

Migrated from rt.cpan.org#72761 (status was 'new')

Requestors:

• artemmus@gmail.com

From artemmus@gmail.com on 2011-11-27 19:00:39:

Hello

I found that if server set cookie with domain in format like this
".domain.com" and then
2) and then LWP goes to http://domain.com cookie not passed to http://domain.com

to fix it, I write this code in HTTP::Cookies.pm

sub add_cookie_header
{
    my $self = shift;
    my $request = shift || return;
    my $url = $request->uri;
    my $scheme = $url->scheme;
    unless ($scheme =~ /^https?\z/) {
        return;
    }

    my $domain = _host($request, $url);
    # ARTEMMUS BUG FIX, for domain with dot in front like .site.com
    $domain = '.'.$domain if $domain !~ /^\./;
    # END BUG FIX
...


-- 
С уважением,
 Artem                          mailto:artemmus@gmail.com

Start in HTTP::Cookies.pm at add_cookie_header and trace how cookies set for a dotted domain are matched when requesting the corresponding bare domain. Reproduce the reported request sequence and verify that the cookie is sent to http://domain.com; done means this behavior is covered and does not regress existing cookie handling.