From: noreply@...
Date: 2005-05-31T03:31:08+09:00
Subject: [ ruby-Bugs-1972 ] CGI::Cookie::parse does not properly parse set-cookie headers

Bugs item #1972, was opened at 2005-05-30 11:24
You can respond by visiting: 
http://rubyforge.org/tracker/?func=detail&atid=1698&aid=1972&group_id=426

Category: Standard Library
Group: None
Status: Open
Resolution: None
Priority: 3
Submitted By: Brian Donovan (eventualbuddha)
Assigned to: Nobody (None)
Summary: CGI::Cookie::parse does not properly parse set-cookie headers

Initial Comment:
When parsing set-cookie headers, CGI::Cookie::parse reads individual cookies as separated by `; ', not `, ' as it should do. The `; ' character separates name/value pairs describing individual cookies. Thus "CookieState=Yes; path=/, SecondCookie=TheValue; expires=Sun 29 May 2005 16:15:00 PST; path=/otherdir" yields two cookies:

SecondCookie = TheValue
CookieState = Yes

with different expiration and path parameters. The current implementation would yield three cookies:

expires = Sun 29 May 2005 16:15:00 PST
CookieState = Yes
path = /, SecondCookie=TheValue

which is totally nonsensical. A new implementation of the method is attached.

----------------------------------------------------------------------

You can respond by visiting: 
http://rubyforge.org/tracker/?func=detail&atid=1698&aid=1972&group_id=426