]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) (GH-12261)
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sun, 10 Mar 2019 02:58:25 +0000 (18:58 -0800)
committerNed Deily <nad@python.org>
Sun, 10 Mar 2019 02:58:25 +0000 (21:58 -0500)
commite5123d81ffb3be35a1b2767d6ced1a097aaf77be
tree276e4438b1b741338074edf350411c02e22c20fa
parent4e2079d8965f8843f974d32208b06d3d3cb980ef
bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) (GH-12261)

Don't send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with `http.cookiejar.DefaultCookiePolicy` policy.  Patch by Karthikeyan Singaravelan.
(cherry picked from commit ca7fe5063593958e5efdf90f068582837f07bd14)

Co-authored-by: Xtreak <tir.karthi@gmail.com>
Lib/http/cookiejar.py
Lib/test/test_http_cookiejar.py
Misc/NEWS.d/next/Security/2018-10-31-15-39-17.bpo-35121.EgHv9k.rst [new file with mode: 0644]