[issue19870] Backport Cookie fix to 2.7 (httponly / secure flag)

2013-12-02 Thread Florian Pilz
New submission from Florian Pilz: Until Python 3.3.3 the Cookie library did not support the httponly and secure flag (see Issue 16611). Therefore the library is not RFC conform until then, so I think there should be a backport into 2.7 and maybe 3.2 as well. -- components: Library

[issue19869] BaseCookie does not complain if a non RFC compliant cookie header was given

2013-12-02 Thread Florian Pilz
New submission from Florian Pilz: BaseCookie should give an informative error, if a non RFC compliant header was given. The problem was, that we thought several cookies are allowed in one header in a cookie *response* header. However, this is only allowed in cookie *request* headers. In