dotnet/runtime

Support cookie values with comma

Open

#58 773 ouverte le 7 sept. 2021

Voir sur GitHub
 (34 commentaires) (2 réactions) (0 assignés)C# (5 445 forks)batch import
area-System.Net.Httpbughelp wanted

Métriques du dépôt

Stars
 (17 886 stars)
Métriques de merge PR
 (Merge moyen 12j 11h) (661 PRs mergées en 30 j)

Description

The following code will fail.

cookieContainer.Add(new Cookie("foo", "ba,r", "/", "example.com"));
---> System.Net.CookieException: The 'Value'='ba,r' part of the cookie is invalid.

This means that c# does not allow commas, but major browsers (Chrome, Firefox) do.

Chrome, Edge, and Firefox are the ones that allow commas. The combined market share of these browsers is probably over 90%. This means that allowing commas is a de facto standard.

My opinion is that we should follow the de facto standards, not the standardization bodies, because our goal is not to follow standards, but to solve real problems.

We need to face this.


Similar discussion in Golang: https://github.com/golang/go/issues/7243

Guide contributeur