[Patches] [ python-Patches-655760 ] Add warnings to unsafe Cookie classes

[noreply@sourceforge.net]

Patches item #655760, was opened at 2002-12-18 09:37
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=305470&aid=655760&group_id=5470

Category: Library (Lib)
Group: Python 2.3
Status: Open
Resolution: None
Priority: 5
Submitted By: A.M. Kuchling (akuchling)
Assigned to: Nobody/Anonymous (nobody)
Summary: Add warnings to unsafe Cookie classes

Initial Comment:
The attached patch adds a warning when the SerialCookie and SmartCookie classes are instantiated.  

2.2.2's docs warn against using the classes.  If this patch is accepted, 2.3 will warn whenever the classes are used, and they can be removed in 2.4.  (Is there a PEP  which records things to remove so we don't forget?  PEP 4 lists entire modules, but not classes or methods.)

Alternatively, we could say this is a serious security risk and just rip the classes out without deprecating them first; that would require a BDFL pronouncement, I think.




----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=305470&aid=655760&group_id=5470