From 7a09b52c98ac8d840a8a9907b1a1d9a9e684bcf5 Mon Sep 17 00:00:00 2001 From: Daniel Gustafsson Date: Thu, 13 Dec 2018 09:57:58 +0100 Subject: cookies: leave secure cookies alone Only allow secure origins to be able to write cookies with the 'secure' flag set. This reduces the risk of non-secure origins to influence the state of secure origins. This implements IETF Internet-Draft draft-ietf-httpbis-cookie-alone-01 which updates RFC6265. Closes #2956 Reviewed-by: Daniel Stenberg --- tests/data/test61 | 1 - 1 file changed, 1 deletion(-) (limited to 'tests/data/test61') diff --git a/tests/data/test61 b/tests/data/test61 index 784163fa9..2709f5112 100644 --- a/tests/data/test61 +++ b/tests/data/test61 @@ -65,7 +65,6 @@ Accept: */* # https://curl.haxx.se/docs/http-cookies.html # This file was generated by libcurl! Edit at your own risk. -.foo.com TRUE /moo TRUE 0 test3 maybe .host.foo.com TRUE /we/want/ FALSE 2054030187 test2 yes #HttpOnly_.foo.com TRUE /we/want/ FALSE 2054030187 test yes -- cgit v1.2.3