DeprecationWarning: Cookie/SmartCookie class is insecure

Ian Bicking ianb at colorstudy.com
Mon Oct 20 02:39:43 EDT 2003


On Monday, October 20, 2003, at 01:13 AM, Ben Finney wrote:
> I'm using a library that uses SmartCookie.  In Python 2.3, that gives
> this warning:
>
>     /usr/lib/python2.3/Cookie.py:712: DeprecationWarning:
>         Cookie/SmartCookie class is insecure; do not use it
>
> What should the library be using instead of SmartCookie?

Use SimpleCookie instead -- you'll only be able to set and get string 
cookies (not ints, lists, classes and the like), but it will be secure. 
  Most people don't use that feature anyway, even if they are using 
SmartCookie.

--
Ian Bicking | ianb at colorstudy.com | http://blog.ianbicking.org






More information about the Python-list mailing list