[issue991266] Cookie.py does not correctly quote Morsels

Alex Gaynor report at bugs.python.org
Thu Apr 19 23:07:18 EDT 2018


Alex Gaynor <alex.gaynor at gmail.com> added the comment:

None of the above :-) I'd expect the last one, but with quoting.

You should not be able to set fields in a cookie by injection.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue991266>
_______________________________________


More information about the Python-bugs-list mailing list