dotnet/runtime

Support cookie values with comma

Open

#58.773 aberto em 7 de set. de 2021

Ver no GitHub
 (34 comments) (2 reactions) (0 assignees)C# (5.445 forks)batch import
area-System.Net.Httpbughelp wanted

Métricas do repositório

Stars
 (17.886 stars)
Métricas de merge de PR
 (Mesclagem média 12d 11h) (661 fundiu PRs em 30d)

Description

The following code will fail.

cookieContainer.Add(new Cookie("foo", "ba,r", "/", "example.com"));
---> System.Net.CookieException: The 'Value'='ba,r' part of the cookie is invalid.

This means that c# does not allow commas, but major browsers (Chrome, Firefox) do.

Chrome, Edge, and Firefox are the ones that allow commas. The combined market share of these browsers is probably over 90%. This means that allowing commas is a de facto standard.

My opinion is that we should follow the de facto standards, not the standardization bodies, because our goal is not to follow standards, but to solve real problems.

We need to face this.


Similar discussion in Golang: https://github.com/golang/go/issues/7243

Guia do colaborador