Skip to content
This repository has been archived by the owner on Jan 5, 2024. It is now read-only.

Support deeper levels of subdomains according to RFC 6265 #25

Open
RKushnir opened this issue Aug 7, 2018 · 0 comments · May be fixed by #35
Open

Support deeper levels of subdomains according to RFC 6265 #25

RKushnir opened this issue Aug 7, 2018 · 0 comments · May be fixed by #35

Comments

@RKushnir
Copy link

RKushnir commented Aug 7, 2018

The existing code for cookie validation was written 9 years ago, before the RFC 6265. So it only supports one level of subdomains between the cookie domain-value and the requested host name:

Set-Cookie: "Hello=w0r1d;Path=/;Domain=.grandma.com"

matches eat.grandma.com, but does not match lets.eat.grandma.com.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant