Re: cookie contanier does not correctly parse Set-Cookie header with domain token

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: UL-Tomten <tomten@xxxxxxxxx>
Date: Sun, 12 Aug 2007 10:42:58 -0700

On Aug 12, 10:13 am, "dav" <dave> wrote:

(sorry early post sent before finished...)

No problem. It's easy to get carried away.

if the set cookie header includes a domain entry, like the following line:
Set-Cookie: id=123123; domain=www.domain.com;path=/
the cookie header is not parsed correctly [...]

According to RFC 2109, the above cookie should be rejected, since it
doesn't start with a dot:

4.2.2 Set-cookie syntax

Domain=domain
Optional. The Domain attribute specifies the domain for which
the
cookie is valid. An explicitly specified domain must always
start
with a dot.

Could this be the problem?

.

References:
- cookie contanier does not correctly parse Set-Cookie header with domain token
  - From: dav

Prev by Date: Re: CLR20r3 - what am I missing?
Next by Date: Re: Weak Dictionary / Cache
Previous by thread: cookie contanier does not correctly parse Set-Cookie header with domain token
Index(es):
- Date
- Thread

Relevant Pages

Re: do we need to have the "dot" in web.config ?
... thats supposedly the suffix of the cookie? ... hence the DOT ... I think it is just a naming habit, ...
(microsoft.public.dotnet.framework.aspnet)
Re: Re: cookie contanier does not correctly parse Set-Cookie header with domain token
... i am using HttpWebRequest with cookie container to perform web request. ... the cookie header is not parsed correctly (the domain is the same as the Uri ... doesn't start with a dot: ... An explicitly specified domain must always ...
(microsoft.public.dotnet.framework)
Re: FormsAuthentication Fails
... When I removed the dot from the cookie name, ... I forced re-authenticating the user, ... CustomerInfo.EmailStatus ems = customerInfo.EmailPasswordExists; ...
(microsoft.public.dotnet.framework.aspnet.security)
Re: Download a webpage that contains javascript
... >The server sends a cookie. ... I agree with Chander that you need to read the RFC on HTTP 1.1 ... In order for you to set properties in a URLConnection, ...
(comp.lang.java)
Re: Encryption and RFC 2109
... encrypt/decrypt some ... top of page 4 in RFC 2109 says ... possibly in a server-selected printable ASCII ... work with cookie values (as long as the values are not too long, ...
(comp.lang.java.programmer)