Change #271743
| Category | curl |
| Changed by | alhudz <al.hudz.k@gmail.com> |
| Changed at | Thu 18 Jun 2026 23:58:07 |
| Repository | https://github.com/curl/curl.git |
| Project | curl |
| Branch | master |
| Revision | fdd6ba3580f877a71394e106bd66f8d81fcb5771 |
Comments
cookie: check __Secure- and __Host- case sensitively when read from file The header path matches these prefixes case sensitively, as 5af0165562 made it for cookie spec reasons, but the Netscape cookie-file path still used a case-insensitive match. Align the file path so a differently cased name like __secure-x is treated as an ordinary cookie instead of being put through the prefix integrity checks. Extended test 2311 to cover it. Closes #22085
Changed files
- lib/cookie.c
- tests/data/test2311