-
-
Notifications
You must be signed in to change notification settings - Fork 9.6k
Cookie::fromString() HeaderUtils::split() - Symfony's HttpFoundation #33667
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
Would you be able to submit a fix for this issue? (with a test case of course) |
Sure, let me work on it. |
Hey, thanks for your report! |
Friendly ping? Should this still be open? I will close if I don't hear anything. |
Afaik this is still relevant. |
Status: Reviewed see #39681 |
Description
Issue was identified when adding a Set-Cookie header with a query string value to a Response object, and was traced back to HeaderUtils::split() called from Cookie::fromString().
This function fails to parse cookie values with '=' symbols on it, which is perfectly fine according the RFC 6265.
A string like "foo_cookie=foo=1&bar=2&baz=3" ends up being just "foo" in the Cookie object.
How to reproduce
The text was updated successfully, but these errors were encountered: