• Volker Dobler's avatar
    net/http: send more cookie values in double quotes · 8f6d68eb
    Volker Dobler authored
    According to RFC 6255 a cookie value may contain neither spaces " "
    nor commas ",". But browsers seem to handle these pretty well and such
    values are not uncommon in the wild so we do allow spaces and commas
    in cookie values too. Up to now we use the double-quoted wire format
    only for cookie values with leading and/or trailing spaces and commas.
    Values with internal spaces/commas are sent without the optional double
    quotes. This seems to be a problem for some agents.
    
    This CL changes the behaviour for cookie values with spaces or commas:
    Such values are always sent in double quotes. This should not have
    any impact on existing agents and the increases of data transmitted
    is negligible.
    
    Fixes #18627
    
    Change-Id: I575a98d589e048aa39d976a3c984550daaca730a
    Reviewed-on: https://go-review.googlesource.com/37328
    Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
    TryBot-Result: Gobot Gobot <gobot@golang.org>
    Reviewed-by: default avatarBrad Fitzpatrick <bradfitz@golang.org>
    8f6d68eb
cookie.go 9.36 KB