Georg Brandl added the comment: OK, so there are two root issues here:
* Django uses __init__(str()) roundtripping, which is not explicitly supported by the library, and worked by accident with previous versions. That it works again with 3.3+ is another accident, and a bug. (The change for #16611 reintroduces "lax" parsing behavior that the security fix was supposed to prevent.) * BaseCookie doesn't roundtrip correctly when pickled with protocol >= 2. This should be fixed in upcoming bugfix releases. I would advise Django to subclass SimpleCookie and fix the pickling issue, which is not hard (see attached diff). ---------- keywords: +patch Added file: http://bugs.python.org/file37062/cookie-pickling-fix.diff _______________________________________ Python tracker <rep...@bugs.python.org> <http://bugs.python.org/issue22758> _______________________________________ _______________________________________________ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com