Re: Bug in HTCookie.c

James D. Brown wrote:

> At http://www.netscape.com/newsref/std/cookie_spec.html, the spec
> states: This string is a sequence of characters excluding
> semi-colon, comma and white space. If there is a need to place such
> data in the name or value, some encoding method such as URL style
> %XX encoding is recommended, though no encoding is defined or
> required.

> 
> IMHO, this is a shortcoming of the HTTP cookie spec, in that it does not 
> require the RFC 1738, section 2.2, encoding for cookie values.  At least the 
> spec does contain a disclaimer at the top:

The Problem is that some server send cookies with commas in the value
(Browser seem to be able to deal with that, at least Netscape, Opera
and MSIE). But with libwww, the cookies value gets truncted. :-(

CU
Olaf

-- 
ceterum censeo microsoft esse delendam.

Received on Tuesday, 3 July 2001 04:00:02 UTC