#5709 incorrect handling of empty cookies
Closed: Fixed None Opened 8 years ago by pvoborni.

FreeIPA's cookie implementation doesn't handle empty cookies well.


Steps to reproduce (chrome browser):

  1. open https://ipa.example.com/ipa/ (must be ipa/ path)
  2. open browser console (ctrl+shift+I, console tab)
  3. document.cookie="test="

  4. try to login, and again, and again ...

master:

  • 25c53ba cookie parser: do not fail on cookie with empty value

ipa-4-3:

  • 5721997 cookie parser: do not fail on cookie with empty value

ipa-4-2:

  • 09de449 cookie parser: do not fail on cookie with empty value

Metadata Update from @pvoborni:
- Issue assigned to pvoborni
- Issue set to the milestone: FreeIPA 4.2.4

7 years ago

Login to comment on this ticket.

Metadata