[drupal-devel] [bug] drupal_http_request improper handles set-cookie headers

killes drupal-devel at drupal.org
Wed Aug 10 18:05:08 UTC 2005


Issue status update for 
http://drupal.org/node/28629
Post a follow up: 
http://drupal.org/project/comments/add/28629

 Project:      Drupal
 Version:      cvs
 Component:    base system
 Category:     bug reports
 Priority:     critical
 Assigned to:  chx
 Reported by:  chx
 Updated by:   killes at www.drop.org
-Status:       patch (code needs review)
+Status:       patch (ready to be committed)

according to the cited RFC I believe this to be correct. The patch does
apply and does not cause parse errors. ;)




killes at www.drop.org



Previous comments:
------------------------------------------------------------------------

Wed, 10 Aug 2005 17:42:33 +0000 : chx

Attachment: http://drupal.org/files/issues/resp.patch (775 bytes)

This is an issue with cookies: when you get multiple response headers
with the same name, they are overridden. This is probably what we want
for location but for set-cookie this is bad. So says RFC 2109:
"
   Informally, the Set-Cookie response header comprises the token Set-
   Cookie:, followed by a comma-separated list of one or more cookies.

"





More information about the drupal-devel mailing list