libwww-perl / libwww-perl/HTTP-Cookies

Quoting of values when stringifying Cookies [rt.cpan.org #78568]

Open
#21 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Perl
Stars
4
Forks
19
PR merge metrics
No merged PRs in 30d

Description

Migrated from rt.cpan.org#78568 (status was 'new')

Requestors:

  • HJANSEN@cpan.org

From hjansen@cpan.org on 2012-07-25 16:37:53:

Other open reports seem to be disregarded but will try anyway:

When stringifying a cookie the utility function
HTTP::Headers::Util::join_header_words is used which will in some cases
add double quotes around the values of key/values pairs in the cookies.

This is especially true for paths.

If, however, this stringified cookies are afterwards parsed again by
HTTP::Cookies::extract_cookies --> HTTP::Cookies::set_cookie these
cookies are rejected because the value for "path" does not start with
"/" (but with '"/').

This might be related to Bug #70721 but I´m not really sure about that.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing HTTP::Headers::Util::join_header_words and the HTTP::Cookies::extract_cookies -> HTTP::Cookies::set_cookie round trip described in the report. Reproduce the path-value case, inspect how quoting is added and parsed, and verify that stringified cookies can be parsed again without rejecting the path.

Written by the indexing model from the issue text.

Assessment

Tech stack
perl
Domain
networking
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.