]> git.ipfire.org Git - thirdparty/tornado.git/commit
Add a v2 secure cookie format.
authorBen Darnell <ben@bendarnell.com>
Mon, 5 May 2014 02:59:12 +0000 (22:59 -0400)
committerBen Darnell <ben@bendarnell.com>
Tue, 6 May 2014 01:58:06 +0000 (21:58 -0400)
commitdd7bc46642f33d746b20b5bbf10450c091f9500e
tree20be8e79678f6a9e1c678ca57979927397177654
parenteed7975d36d120a8a6380504b43c2ae6df8de64a
Add a v2 secure cookie format.

This format fixes some weaknesses in the original format that would allow
characters to be shifted from the "value" field to the "name" or "timestamp"
fields.  It also upgrades the signature from HMAC-SHA1 to HMAC-SHA256,
adds an explicit version field, and adds an as-yet-unused field to
support key rotation in the future.
tornado/test/web_test.py
tornado/web.py