[New-bugs-announce] [issue44463] HTTP Cookiejar doesn't support samesite

Chris Wagner report at bugs.python.org
Sat Jun 19 18:25:23 EDT 2021


New submission from Chris Wagner <jwag.wagner at gmail.com>:

In 3.8 the samesite attributes was added to http.cookies module.
However it hasn't been added to http.cookiejar module. The method: _normalized_cookie_tuples seems to have a hardcoded list of allowable attributes.

While the updated standard is still in draft stage (https://datatracker.ietf.org/doc/draft-ietf-httpbis-rfc6265bis/)
samesite is widely implemented and used (Chrome added support in 2017).

----------
components: Library (Lib)
messages: 396153
nosy: jwag956
priority: normal
severity: normal
status: open
title: HTTP Cookiejar doesn't support samesite
type: enhancement
versions: Python 3.9

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue44463>
_______________________________________


More information about the New-bugs-announce mailing list