Re: BUG: Apache::Cookie v1.0

2002-09-21 Thread Michael McLagan

Once upon a time, I wrote: 

> There is a bug in Apache::Cookie.  It doesn't handle a cookie
> with zero bytes in it!

A clarification, it's not a zero length cookie that is mishandled, it's a 
cookie with an embedded NUL (zero) character.

   Michael





BUG: Apache::Cookie v1.0

2002-09-21 Thread Michael McLagan

Hello,

   There is a bug in Apache::Cookie.  It doesn't handle a cookie with zero 
bytes in it!

$value = "ABCD" . chr(0) . "EFGH";
$cookie = Apache::Cookie->new($request, -name=> 'oatmeal', -value=> $value, 
-domain=>$ENV{'SERVER_NAME'}, -path=>"/");
print $cookie->as_string;


The output looks like:

oatmeal=ABCD; domain=my.web.server.com; path=/; expires=0

Where did the rest of my cookie go?!

Should I not have gotten:

oatmeal=ABCD%00EFGH; domain=my.web.server.com; path=/; expires=0

   Michael