Re: Set-Cookie and commas in extension attributes

• From: Julian Reschke <julian.reschke@gmx.de>
• Date: Fri, 15 Jan 2021 07:33:51 +0100
• To: ietf-http-wg@w3.org
• Message-ID: <fd19b134-3787-f466-acc8-4c8803cae4e9@gmx.de>

Am 15.01.2021 um 06:47 schrieb Martin Thomson:
> Just confirming this, but it appears as though comma is a valid character in an extension to Set-Cookie.  What happens if an intermediary combines two Set-Cookie header fields as permitted by the core specification[1]?
>
> [1] https://httpwg.org/http-core/draft-ietf-httpbis-semantics-latest.html#field.lines

The core specs already say not do that, but maybe rfc6265bis should
point that out as well.

Best regards, Julian

Received on Friday, 15 January 2021 06:34:05 UTC