On 19/08/2024 08:38, Rémy Maucherat wrote:
On Fri, Aug 16, 2024 at 5:25 PM Mark Thomas <ma...@apache.org> wrote:
On 16/08/2024 13:40, Tim Funk wrote:
How about missingEqualsCookie="allow | ignore"?
The proposed options were:
- ignore
- name
- value
Ok, I think your proposed options are very good. Thanks for the
summary. Personally I would have interpreted these as name rather than
value, so it helped clarify.
I also think you are right about not changing the behavior for current
branches. It could be changed to ignore already in 11, and we could
see if people start complaining ?
I've started working on this and found a problem.
The Javadoc for jakarta.servlet.http.Cookie says (and effectively the
same restriction exists all the way back to Servlet 2.1) that Cookie
names cannot be the zero length string.
This is going to need to change at the Servlet spec level. That means
only Tomcat 12 can possibly support the "value" option.
If we want to change the default in 11 then we can go ahead with
"ignore" and "name" and potentially add "value" as as option in Tomcat
12 if the Servlet spec group agrees to the change.
Given how edge case this is, I'm not sure what the Servlet spec will do.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
