On Mon, 02 Jun 2008 21:35:24 +0200
Ruediger Pluem <[EMAIL PROTECTED]> wrote:
> >
> > 1. Accept only "true" or "1"
> > 2. Accept only "secure" and "HttpOnly" (but case insensitive)
> > 3. Accept "true" or "1" or "secure" and "HttpOnly" (but case
> > insensitive)
> >
> > What do you like most (if none please add your favourite
> > proposal :-)?
Sorry, I still owe you a reply. Got distracted.
Should I parse your (3) as ("true" or "1" or "secure") and "HttpOnly"?
If so, that's probably the best option. Descriptive values are
nice and less easy to confuse, but rejecting spec values true/1
would seem perverse. Ugh.
But (2) would be fine. As would (true|1) and HttpOnly. IMHO.
--
Nick Kew
Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/
