romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-28 00:53:06 +03:00
Code Issues Projects Releases Packages Wiki Activity

cookies: extend domain checks to non psl builds

Browse source 
Ensure to perform the checks we have to enforce a sane domain in
the cookie request. The check for non-PSL enabled builds is quite
basic but it's better than nothing.

Closes #2964
Reviewed-by: Daniel Stenberg <daniel@haxx.se>
This commit is contained in:
Daniel Gustafsson 2018-12-19 20:59:09 +01:00
parent 462037ad48
commit 3773de378d
2 changed files with 9 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tests/data/test8
View file

@ -46,6 +46,7 @@ Set-Cookie: trailingspace = removed; path=/we/want;
Set-Cookie: nocookie=yes; path=/WE;
Set-Cookie: blexp=yesyes; domain=%HOSTIP; domain=%HOSTIP; expiry=totally bad;
Set-Cookie: partialip=nono; domain=.0.0.1;
Set-Cookie: chocolate=chip; domain=curl; path=/we/want;
</file>
<precheck>