> Hi Folks, 
> 
> I've been looking into a problem were seeing on our site, which is built on 
> Jetty - it seems that some browsers are sending cookies with a ',' separator 
> (instead of the usual ';') - our cookie getting code in jetty seems to have 
> trouble parsing these cookies. According to the spec 
> http://www.ietf.org/rfc/rfc2109.txt, a ',' is undesirable but acceptable: 
> 
> "Note: For backward compatibility, the separator in the Cookie header is 
> semi-colon (;) everywhere. A server should also accept comma (,) as the 
> separator between cookie-values for future compatibility." 
> I took a peek in the code for jetty-server, and I can see on line 201 of 
> ./src/main/java/org/eclipse/jetty/server/CookieCutter.java we're commenting 
> out ',' in one of the case statements used in the parsing of cookies. Is this 
> intentional? Git annotate shows that change was made on 2012-03-29 16:58:56 
> by Greg Wilkins, as a change, it's very much out on it's on own, so it looks 
> like it's intentional (but I'm not sure!)
> 
> Curious, and would appreciate any guidance.
> Ade.



_______________________________________________
jetty-users mailing list
[email protected]
https://dev.eclipse.org/mailman/listinfo/jetty-users

Reply via email to