Skip to content

fix: Handles multiple cookie headers correctly according to rfc6265 - #440

Merged
schloerke merged 2 commits into
rstudio:mainfrom
andyquinterom:T439
Sep 21, 2026
Merged

schloerke merged 2 commits into
rstudio:mainfrom
andyquinterom:T439

Conversation

@andyquinterom

@andyquinterom andyquinterom commented Jun 23, 2026

Copy link
Copy Markdown
Contributor

@CLAassistant

CLAassistant commented Jun 23, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

andyquinterom and others added 2 commits September 21, 2026 13:11
The third sub-test had no expectation, so the non-Cookie comma
separator was never actually verified. Capture req$HEADERS and assert
on it, and add a case where two Cookie headers are separated by
another header and differ in case.

Also add a NEWS entry.
@schloerke

Copy link
Copy Markdown
Collaborator

Thank you, @andyquinterom !

@schloerke

Copy link
Copy Markdown
Collaborator

@andyquinterom Great chatting with you IRL at conf! Can you point me towards the long running stack overflow? Then I can investigate on my side. Thank you!

@schloerke
schloerke merged commit 06f52bc into rstudio:main Sep 21, 2026
26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Multiple Cookie headers incorrectly concatenated with comma instead of semicolon

3 participants