[issue9824] SimpleCookie should escape commas and semi-colons

[Luke Plant]

Luke Plant <L.Plant.98 at cantab.net> added the comment:

I forgot to mention backwards compatibility:

In the context of Cookie being used in a web application, if developers were relying on literal commas and semi-colons being present in the client side cookie value (e.g. in javascript), the patch will introduce an incompatibility.

A quick review of cookies on my computer shows that 22 out of 3079 have commas in them, and none have semi-colons in them.  For those with commas, there would still only be a problem if they were reading them client side, or not using Python's Cookie library to decode the values server side.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue9824>
_______________________________________