FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

gh-149028: Revert gh-92936 changes by serhiy-storchaka · Pull Request #149182 · python/cpython · GitHub

Repository navigation

gh-149028: Revert gh-92936 changes - #149182

Merged
serhiy-storchaka merged 2 commits into
python:mainfrom
serhiy-storchaka:revert-gh-92936
Apr 30, 2026
Merged

serhiy-storchaka merged 2 commits into
python:mainfrom
serhiy-storchaka:revert-gh-92936

Conversation

serhiy-storchaka commented Apr 30, 2026 •
edited by bedevere-app Bot
Loading

Copy link
Copy Markdown
Member

Revert "gh-92936: allow double quote in cookie values (#113663)"
This reverts commit d7dbde8.

Revert "gh-92936: update http.cookies docs post GH-113663 (#137566)"
This reverts commit d86c225.

Copy link
Copy Markdown

Documentation build overview

📚 cpython-previews | 🛠️ Build #32482576 | 📁 Comparing d09dba8 against main (4599335)

  🔍 Preview build  

4 files changed
± contents.html
± download.html
± library/http.cookies.html
± whatsnew/3.15.html

tim-one left a comment •
edited
Loading

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Absolutely. To summarize why, the original change:

  • Opened the door to a new exponential-time reDOS attack.
  • Wasn't well defined: it allowed for ambiguous inputs. This can't be repaired (trying to remove the meta-meanings of both semicolon and unescapred double quote inside a double-quoted string value makes it impossible in some cases to know when the string was intended to end).

So there's no clear way to preserve the intent of the original change. It's not just a matter of rewriting the implementation - the intent was subtly incoherent.

If something "like" the intent is desired, it requires a different design.

serhiy-storchaka merged commit c80e446 into python:main Apr 30, 2026
101 of 103 checks passed
serhiy-storchaka deleted the revert-gh-92936 branch April 30, 2026 19:19
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants


Back | FazBrowse Home | New Git URL