Hsnmohd opened a new pull request, #924:
URL: https://github.com/apache/httpcomponents-client/pull/924

   store the cookie spec and origin before RequestAddCookies short-circuits on 
a caller-set Cookie header, otherwise ResponseProcessCookies validates the 
response's Set-Cookie against the origin left in the context by the previous 
exchange and a cookie set by one host is stored and replayed under another 
host's domain.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to