generic-library/curl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

- Dima Barsky made the curl cookie parser accept cookies even with blank or

Browse Source 
unparsable expiry dates and then treat them as session cookies - previously
  libcurl would reject cookies with a date format it couldn't parse. Research
  shows that the major browser treat such cookies as session cookies. I
  modified test 8 and 31 to verify this.
This commit is contained in:
Daniel Stenberg
2009-10-25 18:15:14 +00:00
parent 7867d44251
commit 448d2b5f49
5 changed files with 17 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lib/cookie.c
View File

@@ -363,9 +363,8 @@ Curl_cookie_add(struct SessionHandle *data,
badcookie = TRUE;
break;
}
/* Note that we store -1 in 'expires' here if the date couldn't
get parsed for whatever reason. This will have the effect that
the cookie won't match. */
/* Note that if the date couldn't get parsed for whatever reason,
the cookie will be treated as a session cookie */
co->expires = curl_getdate(what, &now);
/* Session cookies have expires set to 0 so if we get that back
@@ -373,6 +372,8 @@ Curl_cookie_add(struct SessionHandle *data,
non-session cookie */
if (co->expires == 0)
co->expires = 1;
else if( co->expires < 0 )
co->expires = 0;
}
else if(!co->name) {
co->name = strdup(name);