Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
C
cpython
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
Kirill Smelkov
cpython
Commits
f14730a4
Commit
f14730a4
authored
Dec 31, 2002
by
Fred Drake
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
- correct the deprecation markups so this formats again
- some minor cleanups
parent
c8b2e770
Changes
1
Show whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
7 additions
and
9 deletions
+7
-9
Doc/lib/libcookie.tex
Doc/lib/libcookie.tex
+7
-9
No files found.
Doc/lib/libcookie.tex
View file @
f14730a4
...
...
@@ -19,12 +19,12 @@ specs. As a result, the parsing rules used are a bit less strict.
\begin{excdesc}
{
CookieError
}
Exception failing because of
\rfc
{
2109
}
invalidity: incorrect
attributes, incorrect
\
code
{
Set-Cookie
}
header, etc.
attributes, incorrect
\
mimeheader
{
Set-Cookie
}
header, etc.
\end{excdesc}
\begin{classdesc}
{
BaseCookie
}{
\optional
{
input
}}
This class is a dictionary-like object whose keys are strings and
whose values are
\class
{
Morsel
}
s. Note that upon setting a key to
whose values are
\class
{
Morsel
}
instance
s. Note that upon setting a key to
a value, the value is first converted to a
\class
{
Morsel
}
containing
the key and the value.
...
...
@@ -42,11 +42,10 @@ This class derives from \class{BaseCookie} and overrides
\method
{
value
_
decode()
}
and
\method
{
value
_
encode()
}
to be the
\function
{
pickle.loads()
}
and
\function
{
pickle.dumps()
}
.
\
strong
{
Do not use this class!
}
Reading pickled values from untrusted
\
deprecated
{
2.3
}{
Reading pickled values from untrusted
cookie data is a huge security hole, as pickle strings can be crafted
to cause arbitrary code to execute on your server. It is supported
for backwards compatibility only, and may eventually go away.
\deprecated
{
2.3
}
for backwards compatibility only, and may eventually go away.
}
\end{classdesc}
\begin{classdesc}
{
SmartCookie
}{
\optional
{
input
}}
...
...
@@ -56,9 +55,8 @@ valid pickle, and otherwise the value itself. It overrides
\method
{
value
_
encode()
}
to be
\function
{
pickle.dumps()
}
unless it is a
string, in which case it returns the value itself.
\strong
{
Note:
}
The same security warning from
\class
{
SerialCookie
}
applies here.
\deprecated
{
2.3
}
\deprecated
{
2.3
}{
The same security warning from
\class
{
SerialCookie
}
applies here.
}
\end{classdesc}
A further security note is warranted. For backwards compatibility,
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment