In the javadocs, Cookie.setDomain() says:
The form of the domain name is specified by RFC 2109.

Where RFC 2109 says:
   Domain=domain
      Optional.  The Domain attribute specifies the domain for which the
      cookie is valid.  An explicitly specified domain must always start
      with a dot.

And the code for setDomain() - for tomcat 4,5:
    public void setDomain(String pattern) {
        domain = pattern.toLowerCase(); // IE allegedly needs this
    }


Shouldn't an exception be thrown since the incoming domain is not RFC 2109 compliant? But that may break a lot of code. (including mine) I discovered this accidently when HttpClient yelled at me when my webserver was passing bad domains back.


-Tim


--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to