From 5f33c6b0f5e7a0e5cb849e791adced2528df3227 Mon Sep 17 00:00:00 2001 From: naruse Date: Tue, 27 Sep 2016 03:17:47 +0000 Subject: * lib/cgi/cookie.rb (parse): don't allow , as a separator. [Bug #12791] * lib/webrick/cookie.rb (parse): ditto. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@56262 b2dd03c8-39d4-4d8f-98ff-823fe69b080e --- lib/cgi/cookie.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lib/cgi/cookie.rb') diff --git a/lib/cgi/cookie.rb b/lib/cgi/cookie.rb index ffd88b8edb..4cc050b90d 100644 --- a/lib/cgi/cookie.rb +++ b/lib/cgi/cookie.rb @@ -162,7 +162,7 @@ class CGI cookies = Hash.new([]) return cookies unless raw_cookie - raw_cookie.split(/[;,]\s?/).each do |pairs| + raw_cookie.split(/;\s?/).each do |pairs| name, values = pairs.split('=',2) next unless name and values name = CGI.unescape(name) -- cgit v1.2.3