[issue2190] MozillaCookieJar ignore HttpOnly cookies

Daniel Lenski added the comment: I've got a patch that will address both loading and saving of "HTTP-only" cookies: https://github.com/python/cpython/compare/master...dlenski:patch-1 Testing/feedback before I submit as a PR would be very welcome. -- versions: +Python 3.10, Python 3.7

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Terry J. Reedy added the comment: This issue was closed as useless for Firefox in 2010 by the original poster, msg109958. My participation here is only as tracker triager, as I only have a consumer knowledge of cookies. Unfortunately, there is no core developer expert for http, let alone t

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Daniel Lenski added the comment: Also confused about why this was closed. This format is still frequently used. In the absence of a solution in the standard library, I'm using this kludge to strip the leading `#HttpOnly_`. from tempfile import NamedTemporaryFile from http.cookiejar

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Mike Thomas added the comment: Can this issue be reopened? As Jérémie stated, curl uses this format and outputs cookie files using the #HttpOnly_ prefix. I also found at least one project that is working around lack of this support: https://code.google.com/archive/p/git-repo/ https://gerrit.goo

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Changes by Jérémie Detrey : -- versions: +Python 3.3, Python 3.4, Python 3.5, Python 3.6 ___ Python tracker ___ ___ Python-bugs-list ma

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Jérémie Detrey added the comment: Dear all, In fact, this cookie.txt format is still used by curl. For instance, see https://github.com/bagder/curl/blob/curl-7_39_0/lib/cookie.c#L644 which clearly shows support for the "#HttpOnly_" prefix. Therefore, supporting this format in http.cookiejar

[issue2190] MozillaCookieJar ignore HttpOnly cookies

John J Lee added the comment: Is deprecation really necessary? lynx still uses that format. lynx doesn't write the header that MozillaCookieJar insists on being present, but a trivial subclass can read cookies files written by lynx. -- ___ Python

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Terry J. Reedy added the comment: Would you suggest removing MozillaCookieJar from the module? (Through the normal warn-deprecate-remove process.) -- ___ Python tracker ___ _

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Dou Yuan added the comment: Firefox no longer use cookies.txt. I think this patch is useless. -- status: open -> closed ___ Python tracker ___ ___

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Terry J. Reedy added the comment: MozillaCookieJar is now a class in http.cookiejar, so patch would need update. Is this still used enough to bother? -- nosy: +tjreedy versions: +Python 3.2 -Python 2.6 ___ Python tracker

[issue2190] MozillaCookieJar ignore HttpOnly cookies

John J Lee <[EMAIL PROTECTED]> added the comment: I think firefox 3 no longer writes cookies.txt (it writes cookies.sqlite instead). Can anybody point out a version of firefox that wrote this HttpOnly information to cookies.txt, so the patch can be tested? __

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Changes by John J Lee <[EMAIL PROTECTED]>: -- nosy: +jjlee ___ Python tracker <[EMAIL PROTECTED]> ___ ___ Python-bugs-list mailing list

[issue2190] MozillaCookieJar ignore HttpOnly cookies

Changes by Sean Reifschneider <[EMAIL PROTECTED]>: -- assignee: -> loewis nosy: +loewis priority: -> normal type: -> feature request __ Tracker <[EMAIL PROTECTED]> __ __

[issue2190] MozillaCookieJar ignore HttpOnly cookies

New submission from Dou Yuan: HttpOnly cookie in Firefox's cookies.txt begins with "#HttpOnly_" now, just like a comment, e.g.: #HttpOnly_.rad.live.comTRUE/FALSE125821FC09FB= #HttpOnly_service.ilib.cnFALSE/FALSE1209905939 .ASPXANONYMOUS JMeD5-aty