Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restrict cookies to same-origin #120

Merged
merged 15 commits into from
May 18, 2014
Merged

Restrict cookies to same-origin #120

merged 15 commits into from
May 18, 2014

Conversation

rmccue
Copy link
Collaborator

@rmccue rmccue commented May 17, 2014

At the moment, cookie origins have to be handled by the Requests user, rather than by the library. This sucks.

Fixes #118, see #119 for cookie handling overview.

@rmccue rmccue added this to the 1.7 milestone May 17, 2014
@rmccue rmccue added the Extras label May 17, 2014
@coveralls
Copy link

Coverage Status

Coverage increased (+0.28%) when pulling 3d837ff on cookie-origins into c86bc71 on master.

The normalization applied to the path should only be applied to the
default-path, not all paths.
This is part of the compatibility with older clients/servers as
specified in the RFC.
@coveralls
Copy link

Coverage Status

Coverage decreased (-0.06%) when pulling f44da21 on cookie-origins into c86bc71 on master.

rmccue added a commit that referenced this pull request May 18, 2014
Restrict cookies to same-origin
@rmccue rmccue merged commit b398534 into master May 18, 2014
@rmccue rmccue deleted the cookie-origins branch May 18, 2014 05:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cookies don't check origin domain/path
2 participants