changeset: 96233:c58f3e76dc6c parent: 96229:7f2e6f236202 parent: 96232:a43f5515e3a2 user: Benjamin Peterson date: Sat May 23 10:41:30 2015 -0500 files: Lib/http/cookies.py Lib/test/test_http_cookies.py Misc/NEWS description: merge 3.4 (#22931) diff -r 7f2e6f236202 -r c58f3e76dc6c Lib/http/cookies.py --- a/Lib/http/cookies.py Sun May 24 01:03:46 2015 +1000 +++ b/Lib/http/cookies.py Sat May 23 10:41:30 2015 -0500 @@ -455,12 +455,13 @@ # result, the parsing rules here are less strict. # -_LegalCharsPatt = r"[\w\d!#%&'~_`><@,:/\$\*\+\-\.\^\|\)\(\?\}\{\=]" +_LegalKeyChars = r"\w\d!#%&'~_`><@,:/\$\*\+\-\.\^\|\)\(\?\}\{\=" +_LegalValueChars = _LegalKeyChars + '\[\]' _CookiePattern = re.compile(r""" (?x) # This is a verbose pattern \s* # Optional whitespace at start of cookie (?P # Start of group 'key' - """ + _LegalCharsPatt + r"""+? # Any word of at least one letter + [""" + _LegalKeyChars + r"""]+? # Any word of at least one letter ) # End of group 'key' ( # Optional group: there may not be a value. \s*=\s* # Equal Sign @@ -469,7 +470,7 @@ | # or \w{3},\s[\w\d\s-]{9,11}\s[\d:]{8}\sGMT # Special case for "expires" attr | # or - """ + _LegalCharsPatt + r"""* # Any word or empty string + [""" + _LegalValueChars + r"""]* # Any word or empty string ) # End of group 'val' )? # End of optional value group \s* # Any number of spaces. diff -r 7f2e6f236202 -r c58f3e76dc6c Lib/test/test_http_cookies.py --- a/Lib/test/test_http_cookies.py Sun May 24 01:03:46 2015 +1000 +++ b/Lib/test/test_http_cookies.py Sat May 23 10:41:30 2015 -0500 @@ -44,6 +44,19 @@ 'repr': "", 'output': 'Set-Cookie: key:term=value:term'}, + # issue22931 - Adding '[' and ']' as valid characters in cookie + # values as defined in RFC 6265 + { + 'data': 'a=b; c=[; d=r; f=h', + 'dict': {'a':'b', 'c':'[', 'd':'r', 'f':'h'}, + 'repr': "", + 'output': '\n'.join(( + 'Set-Cookie: a=b', + 'Set-Cookie: c=[', + 'Set-Cookie: d=r', + 'Set-Cookie: f=h' + )) + } ] for case in cases: diff -r 7f2e6f236202 -r c58f3e76dc6c Misc/NEWS --- a/Misc/NEWS Sun May 24 01:03:46 2015 +1000 +++ b/Misc/NEWS Sat May 23 10:41:30 2015 -0500 @@ -325,6 +325,8 @@ lines from the code object, fixing an issue when a lambda function is used as decorator argument. Patch by Thomas Ballinger and Allison Kaptur. +- Issue #22931: Allow '[' and ']' in cookie values. + - The keywords attribute of functools.partial is now always a dictionary. - Issue #23811: Add missing newline to the PyCompileError error message.