Re: Re: cvs: php-src /main php_variables.c

From:	Stefan Esser	Date:	Sun, 24 Apr 2005 12:26:26 +0000
Subject:	Re: Re: cvs: php-src /main php_variables.c
References:	1 2 3 4 5	Groups:	php.internals
Request:	Send a blank email to internals+get-16066@lists.php.net to get a copy of this message

Hi Jani,

    'value' can NOT contain any of these chars: ,; \t\r\n\013\014
Wrong. value is to the RFC either a token or a quoted_string and a quoted_string can contain , and ;

    If you want such chars in them, you have to encode them.
Yes in your implementation that is not RFC conform

Forgive me my ignorance, but I do not see any handling of " chars.
    And there wasn't such before I added the , as acceptable separator.

Yes because PHP spoke cookie version 0 before your patch. Now it speaks neither version 0 nor version 1 but your own version. Stefan -- -------------------------------------------------------------------------- Stefan Esser sesser@php.net Hardened-PHP Project http://www.hardened-php.net/ GPG-Key gpg --keyserver pgp.mit.edu --recv-key 0x15ABDA78 Key fingerprint 7806 58C8 CFA8 CE4A 1C2C 57DD 4AE1 795E 15AB DA78 --------------------------------------------------------------------------