Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HTTP Cookiejar doesn't support samesite #88629

Open
jwag956 mannequin opened this issue Jun 19, 2021 · 1 comment
Open

HTTP Cookiejar doesn't support samesite #88629

jwag956 mannequin opened this issue Jun 19, 2021 · 1 comment
Labels
3.9 only security fixes stdlib Python modules in the Lib dir type-feature A feature request or enhancement

Comments

@jwag956
Copy link
Mannequin

jwag956 mannequin commented Jun 19, 2021

BPO 44463
Nosy @jwag956

Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

Show more details

GitHub fields:

assignee = None
closed_at = None
created_at = <Date 2021-06-19.22:25:23.387>
labels = ['type-feature', 'library', '3.9']
title = "HTTP Cookiejar doesn't support samesite"
updated_at = <Date 2021-06-19.22:25:23.387>
user = 'https://github.com/jwag956'

bugs.python.org fields:

activity = <Date 2021-06-19.22:25:23.387>
actor = 'jwag956'
assignee = 'none'
closed = False
closed_date = None
closer = None
components = ['Library (Lib)']
creation = <Date 2021-06-19.22:25:23.387>
creator = 'jwag956'
dependencies = []
files = []
hgrepos = []
issue_num = 44463
keywords = []
message_count = 1.0
messages = ['396153']
nosy_count = 1.0
nosy_names = ['jwag956']
pr_nums = []
priority = 'normal'
resolution = None
stage = None
status = 'open'
superseder = None
type = 'enhancement'
url = 'https://bugs.python.org/issue44463'
versions = ['Python 3.9']

Linked PRs

@jwag956
Copy link
Mannequin Author

jwag956 mannequin commented Jun 19, 2021

In 3.8 the samesite attributes was added to http.cookies module.
However it hasn't been added to http.cookiejar module. The method: _normalized_cookie_tuples seems to have a hardcoded list of allowable attributes.

While the updated standard is still in draft stage (https://datatracker.ietf.org/doc/draft-ietf-httpbis-rfc6265bis/)
samesite is widely implemented and used (Chrome added support in 2017).

@jwag956 jwag956 mannequin added 3.9 only security fixes stdlib Python modules in the Lib dir type-feature A feature request or enhancement labels Jun 19, 2021
@ezio-melotti ezio-melotti transferred this issue from another repository Apr 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3.9 only security fixes stdlib Python modules in the Lib dir type-feature A feature request or enhancement
Projects
Status: No status
Development

No branches or pull requests

0 participants