Hi,

I have a problem using paste.auth.cookie to wrap an app when it is
deployed on Apache/mod_wsgi. Apparently paste.auth.cookie sometimes
sends a malformed Set-Cookie header with an embedded new line which
Apache chokes on.

This is the discussion where we tracked the problem in mod_wsgi's ML:
http://groups.google.com/group/modwsgi/browse_thread/thread/e56854857756d151

The following patch against Paste's trunk fixes the problem in my machine:

Index: paste/auth/cookie.py
===================================================================
--- paste/auth/cookie.py    (revision 7332)
+++ paste/auth/cookie.py    (working copy)
@@ -134,7 +134,7 @@
         cookie = base64.encodestring(
             hmac.new(self.secret, content, sha).digest() +
             make_time(time.time() + 60*self.timeout) +
-            content).replace("/", "_").replace("=", "~")
+            content).replace("/", "_").replace("=", "~").replace('\n','')
         if len(cookie) > self.maxlen:
             raise CookieTooLarge(content, cookie)
         return cookie


Thanks,
Alberto

_______________________________________________
Paste-users mailing list
[email protected]
http://webwareforpython.org/cgi-bin/mailman/listinfo/paste-users

Reply via email to