Re: Rfc6265CookieProcessor domain validation errors

2016-08-25 Thread Svetlin Zarev
Thanks Mark, this makes sense. Best regards, Svetlin This isn't a bug. You are misunderstanding the RFC. > > Domain attributes are only sent from servers to user agents. > > The general rule to keep in mind is: > "Be lenient in what you accept. Be strict in what you send." > > Section 5.2.3 appl

Re: Rfc6265CookieProcessor domain validation errors

2016-08-25 Thread Mark Thomas
On 25/08/2016 08:28, Svetlin Zarev wrote: > Hello! > > The new Rfc6265CookieProcessor fails to validate domains that start with a > dot. According to rfc6265#5.2.3 [1]: > > If the first character of the attribute-value string is %x2E ("."): > > Let cookie-domain be the attribute-value with

Re: Rfc6265CookieProcessor domain validation errors

2016-08-25 Thread Svetlin Zarev
Proposed fix: https://github.com/apache/tomcat85/pull/2 2016-08-25 10:28 GMT+03:00 Svetlin Zarev : > Hello! > > > > The new Rfc6265CookieProcessor fails to validate domains that start with a > dot. According to rfc6265#5.2.3 [1]: > > > > If the first character of the attribute-value string is %x2

Rfc6265CookieProcessor domain validation errors

2016-08-25 Thread Svetlin Zarev
Hello! The new Rfc6265CookieProcessor fails to validate domains that start with a dot. According to rfc6265#5.2.3 [1]: If the first character of the attribute-value string is %x2E ("."): Let cookie-domain be the attribute-value without the leading %x2E (".") character. Otherwis