This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author remi.lapeyre
Recipients Kyle Graehl, demian.brecht, remi.lapeyre, riklaunim
Date 2018-11-10.15:27:32
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1541863652.95.0.788709270274.issue23930@psf.upfronthosting.co.za>
In-reply-to
Content
This is not a valid cookie string and I think neither Django nor Nginx would understand this cookie correctly.

On the other hand, per RFC 6265 the comma is a forbidden character in a cookie value (https://tools.ietf.org/html/rfc6265#section-4.1.1):
    
    cookie-pair       = cookie-name "=" cookie-value
    cookie-name       = token
    cookie-value      = *cookie-octet / ( DQUOTE *cookie-octet DQUOTE )
    cookie-octet      = %x21 / %x23-2B / %x2D-3A / %x3C-5B / %x5D-7E
                       ; US-ASCII characters excluding CTLs,
                       ; whitespace DQUOTE, comma, semicolon,
                       ; and backslash

so there is no official way to parse the given string (when a comma is present in the value, the cookie should be encoded as base 64).

Since this is not a valid cookie string anyway, I think the solution proposed by Kyle is appropriate.
History
Date User Action Args
2018-11-10 15:27:33remi.lapeyresetrecipients: + remi.lapeyre, demian.brecht, riklaunim, Kyle Graehl
2018-11-10 15:27:32remi.lapeyresetmessageid: <1541863652.95.0.788709270274.issue23930@psf.upfronthosting.co.za>
2018-11-10 15:27:32remi.lapeyrelinkissue23930 messages
2018-11-10 15:27:32remi.lapeyrecreate