[EMAIL PROTECTED] writes:

> while using HTTP::Cookies, I realized that it behaves differently than most 
> browsers do: If a cookie is being written to a  "domain" which is actually a 
> hostname like in
> 
>     Set-cookie: name=val; path=/; domain=www.aol.com
> 
> all major browsers will accept this pseudo domain and replay the cookie to 
> the hostname (like on http://www.aol.com). HTTP::Cookie, however, will store 
> the cookie's domain as ".www.aol.com" and therefore *won't* replay it on 
> http://www.aol.com. 
> Not sure if this is possibly even somewhat against the original cookie spec 
> -- but if you want HTTP::Cookie to be compliant with the major browsers, I 
> think line 340 in HTTP::Cookies.pm 
> 
>     $domain = ".$domain" unless $domain =~ /^\./;
> 
> has to be deleted. What do you think?

This looks like the same issue that was fixed in the 5.60 release:

    HTTP::Cookies: Allow a domain like .foo.com match host "foo.com".
    Patch by Alexandre Duret-Lutz <[EMAIL PROTECTED]>

What version are you using?

Regards,
Gisle

Reply via email to