[Python-checkins] python/dist/src/Doc/lib libcookie.tex,1.8,1.9

fdrake@users.sourceforge.net fdrake@users.sourceforge.net
Tue, 31 Dec 2002 07:10:55 -0800


Update of /cvsroot/python/python/dist/src/Doc/lib
In directory sc8-pr-cvs1:/tmp/cvs-serv600

Modified Files:
	libcookie.tex 
Log Message:
- correct the deprecation markups so this formats again
- some minor cleanups


Index: libcookie.tex
===================================================================
RCS file: /cvsroot/python/python/dist/src/Doc/lib/libcookie.tex,v
retrieving revision 1.8
retrieving revision 1.9
diff -C2 -d -r1.8 -r1.9
*** libcookie.tex	31 Dec 2002 12:27:11 -0000	1.8
--- libcookie.tex	31 Dec 2002 15:10:49 -0000	1.9
***************
*** 20,29 ****
  \begin{excdesc}{CookieError}
  Exception failing because of \rfc{2109} invalidity: incorrect
! attributes, incorrect \code{Set-Cookie} header, etc.
  \end{excdesc}
  
  \begin{classdesc}{BaseCookie}{\optional{input}}
  This class is a dictionary-like object whose keys are strings and
! whose values are \class{Morsel}s. Note that upon setting a key to
  a value, the value is first converted to a \class{Morsel} containing
  the key and the value.
--- 20,29 ----
  \begin{excdesc}{CookieError}
  Exception failing because of \rfc{2109} invalidity: incorrect
! attributes, incorrect \mimeheader{Set-Cookie} header, etc.
  \end{excdesc}
  
  \begin{classdesc}{BaseCookie}{\optional{input}}
  This class is a dictionary-like object whose keys are strings and
! whose values are \class{Morsel} instances. Note that upon setting a key to
  a value, the value is first converted to a \class{Morsel} containing
  the key and the value.
***************
*** 41,51 ****
  This class derives from \class{BaseCookie} and overrides
  \method{value_decode()} and \method{value_encode()} to be the
! \function{pickle.loads()} and  \function{pickle.dumps()}.  
  
! \strong{Do not use this class!}  Reading pickled values from untrusted
  cookie data is a huge security hole, as pickle strings can be crafted
  to cause arbitrary code to execute on your server.  It is supported
! for backwards compatibility only, and may eventually go away.
! \deprecated{2.3}
  \end{classdesc}
  
--- 41,50 ----
  This class derives from \class{BaseCookie} and overrides
  \method{value_decode()} and \method{value_encode()} to be the
! \function{pickle.loads()} and \function{pickle.dumps()}.
  
! \deprecated{2.3}{Reading pickled values from untrusted
  cookie data is a huge security hole, as pickle strings can be crafted
  to cause arbitrary code to execute on your server.  It is supported
! for backwards compatibility only, and may eventually go away.}
  \end{classdesc}
  
***************
*** 57,63 ****
  string, in which case it returns the value itself.
  
! \strong{Note:} The same security warning from \class{SerialCookie}
! applies here.
! \deprecated{2.3}
  \end{classdesc}
  
--- 56,61 ----
  string, in which case it returns the value itself.
  
! \deprecated{2.3}{The same security warning from \class{SerialCookie}
! applies here.}
  \end{classdesc}