Skip to content

HTTPCLIENT-2415: Normalize CookieOrigin path for cookie matching#803

Merged
arturobernalg merged 1 commit intoapache:masterfrom
arturobernalg:HTTPCLIENT-2415
Feb 11, 2026
Merged

HTTPCLIENT-2415: Normalize CookieOrigin path for cookie matching#803
arturobernalg merged 1 commit intoapache:masterfrom
arturobernalg:HTTPCLIENT-2415

Conversation

@arturobernalg
Copy link
Member

Strip query / fragment from CookieOrigin path per RFC 6265. Add regression tests for request-targets containing '?', '#'.

@arturobernalg arturobernalg requested a review from ok2c February 10, 2026 08:26
this.secure = secure;
}

private static String normalizePath(final String path) {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@arturobernalg I do not think this is the right place to do path parsing. This logic should belong to the protocol interceptor that instantiates CookieOrigin. The CookieOrigin class itself should be just a bean with no / little protocol logic.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ok2c you're right. changed

Strip query / fragment from CookieOrigin path per RFC 6265.
Add regression tests for request-targets containing '?', '#'.
@arturobernalg arturobernalg merged commit 9189d11 into apache:master Feb 11, 2026
10 checks passed
@ok2c
Copy link
Member

ok2c commented Feb 11, 2026

@arturobernalg Please cherry-pick to 5.6.x

arturobernalg added a commit that referenced this pull request Feb 11, 2026
Strip query / fragment from CookieOrigin path per RFC 6265.
Add regression tests for request-targets containing '?', '#'.

(cherry picked from commit 9189d11)
@arturobernalg
Copy link
Member Author

@arturobernalg Please cherry-pick to 5.6.x

done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants