luo980/curl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cookie: do prefix matching case-sensitively

Browse Source 
According to section 4.1.3.1 and 4.1.3.2 of
draft-ietf-httpbis-rfc6265bis-19

Ref: https://datatracker.ietf.org/doc/html/draft-ietf-httpbis-rfc6265bis-19#section-4.1.3.1

Closes #16494
This commit is contained in:
Daniel Stenberg 2025-02-26 07:54:15 +01:00
parent ac4a65f8d2
commit 5b5e2f7318
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/cookie.c
View File

@ -536,9 +536,9 @@ parse_cookie_header(struct Curl_easy *data,
* "the rest". Prefixes must start with '__' and end with a '-', so
* only test for names where that can possibly be true.
*/
if(strncasecompare("__Secure-", Curl_str(&name), 9))
if(!strncmp("__Secure-", Curl_str(&name), 9))
co->prefix_secure = TRUE;
else if(strncasecompare("__Host-", Curl_str(&name), 7))
else if(!strncmp("__Host-", Curl_str(&name), 7))
co->prefix_host = TRUE;
/*