note 125425 rejected from function.setcookie by cmb
| From: | cmb@php.net | Date: | Fri, 09 Oct 2020 11:16:26 +0000 |
| Subject: | note 125425 rejected from function.setcookie by cmb | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-215555@lists.php.net to get a copy of this message | ||
Note Submitter: jve at woodwing dot com
----
By allowing '[' and ']' in the cookie name PHP is i.m.o. not compliant with RFC
6265. According to RFC 6265 the cookie name is a 'token'. In RFC 2616 a token is defined
as:
token = 1*<any CHAR except CTLs or separators>
separators = "(" | ")" | "<" | ">" | "@" |
"," | ";" | ":" | "\" | <"> | "/" |
"[" | "]" | "?" | "=" | "{" | "}" | SP |
HT