[Mailman-Developers] Cookie problems

[Dan Mick]

Dan Mick wrote:

> 2) MakeCookie sets c[key]['expires'] to mm_cfg.ADMIN_COOKIE_LIFE, not to
> 'expires', which is calculated above; that means the cookie object doesn't
> have the 'issued' time added into its 'expires' field.  Given that
> MakeCookie is apparently the source of the HTTP output, this seems wrong too..
> seems like the Expires time is always going to be just the lifetime, not
> the actual expiry date.
>
> Am I misreading something?

Yes...Cookie's _getdate() is used to set the expire time.  How unintuitive!
"It's just a dictionary that holds attribute values...but this one is only a delta
value..."

<sigh>

Still, point 1 makes me worry.