]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.4] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258)...
authorXtreak <tir.karthi@gmail.com>
Sat, 16 Mar 2019 22:56:34 +0000 (04:26 +0530)
committerlarryhastings <larry@hastings.org>
Sat, 16 Mar 2019 22:56:34 +0000 (15:56 -0700)
commit42ad4101d3ba7ca3c371dadf0f8880764c9f15fb
treefd579bec87352f09b733b71166894bd2e267da68
parente260f092cd0d8975c777e73ca6fb549d59b5d452
[3.4] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) (#12279)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe5063593958e5efdf90f068582837f07bd14)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
Lib/http/cookiejar.py
Lib/test/test_http_cookiejar.py
Misc/NEWS.d/next/Security/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst [new file with mode: 0644]