This change looks good.

-Chris.

Jean-Christophe Collet wrote:
Here are my proposed changes to fix 6644726
It does fix all 7 issues listed in the CR (see http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6644726 for details) and adds a proper regression test.

The short list is:

- support for more 'expires' date format
- enforce 'secure' cookies
- enforce the 'port' optional attribute
- set a default 'path' when none is specified as per RFC requirement
- do not apply strict RFC 2965 rules for domain matching when cookie version is 0 (aka Netscape compliant cookies)
- set a default path for cookies
- do not use scheme and port for identifying cookies (i.e. cookies cross over protocols like http & https, or ports)

Patch attached below.

Reply via email to