]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) (GH-12260)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sun, 10 Mar 2019 02:59:28 +0000 (18:59 -0800)
committerNed Deily <nad@python.org>
Sun, 10 Mar 2019 02:59:28 +0000 (21:59 -0500)
commitb241af861b37e20ad30533bc0b7e2e5491cc470f
tree91ad18ba13375a25b7a8dcbef47d51b11d20479a
parentfb352413c1fac65823f274feeb369cd5ab1af2e4
bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) (GH-12260)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe5063593958e5efdf90f068582837f07bd14)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
Lib/http/cookiejar.py
Lib/test/test_http_cookiejar.py
Misc/NEWS.d/next/Security/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst [new file with mode: 0644]