[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Ido Michael]

Ido Michael  added the comment:

Opened a PR:
GH-21017

The documentation in the internal functions was helpful.
Should I also add it once decided on the format in here? 
Doc/library/http.cookies.rst:55

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Ido Michael]

Change by Ido Michael :


--
keywords: +patch
pull_requests: +20191
stage:  -> patch review
pull_request: https://github.com/python/cpython/pull/21017

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Tal Einat]

Tal Einat  added the comment:

It seems that the docs haven't been updated regarding this, so I don't think 
this should be closed. On the contrary, A PR adding a clarification to the docs 
would be most welcome.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Tal Einat]

Change by Tal Einat :


--
versions:  -Python 3.6

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Tal Einat]

Change by Tal Einat :


--
components:  -Library (Lib)

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Ido Michael]

Ido Michael  added the comment:

I think it can be closed?

--
nosy: +Ido Michael

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Ido Michael]

Change by Ido Michael :


--
nosy: +taleinat

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Serhiy Storchaka]

Change by Serhiy Storchaka :


--
versions: +Python 3.10, Python 3.6, Python 3.7, Python 3.8, Python 3.9 -Python 
2.7

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Martin Panter]

Martin Panter  added the comment:

I think the solution here is to document what “SimpleCookie.value_encode” 
really does: RFC 2109 quoted-string escaping. If you want to a generate 
RFC-6265-compliant Set-Cookie string, do not include non-compliant characters 
in the cookie value, and consider using BaseCookie rather than SimpleCookie, 
especially if your “morsel” values are enclosed in double quotes.

--
assignee:  -> docs@python
components: +Documentation
nosy: +docs@python, martin.panter

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Serhiy Storchaka]

Changes by Serhiy Storchaka storch...@gmail.com:


--
nosy: +serhiy.storchaka

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue19670
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue19670] SimpleCookie Generates Non-RFC6265-Compliant Cookies

[Patrick Bogen]

New submission from Patrick Bogen:

SimpleCookie uses _quote to quote cookie values, which converts special 
characters to \OCTAL notation. This is not RFC6265 compliance, which requires- 
in part- that cookie values do not contain backslashes:

 cookie-value  = *cookie-octet / ( DQUOTE *cookie-octet DQUOTE )
 cookie-octet  = %x21 / %x23-2B / %x2D-3A / %x3C-5B / %x5D-7E
   ; US-ASCII characters excluding CTLs,
   ; whitespace DQUOTE, comma, semicolon,
   ; and backslash

--
components: Library (Lib)
messages: 203529
nosy: pdbogen
priority: normal
severity: normal
status: open
title: SimpleCookie Generates Non-RFC6265-Compliant Cookies
type: behavior
versions: Python 2.7

___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue19670
___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com