diff options
author | naruse <naruse@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2016-09-27 03:17:47 +0000 |
---|---|---|
committer | naruse <naruse@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2016-09-27 03:17:47 +0000 |
commit | 93280e0096b8ef0cf3207737e1383f626b0282f2 (patch) | |
tree | 2db80de700359282ce0101a6948e361767c3dda5 /lib/cgi | |
parent | e2c62833a38f89bdb3bccc7165f3f0b62c3583b4 (diff) | |
download | ruby-93280e0096b8ef0cf3207737e1383f626b0282f2.tar.gz |
* lib/cgi/cookie.rb (parse): don't allow , as a separator. [Bug #12791]
* lib/webrick/cookie.rb (parse): ditto.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@56262 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'lib/cgi')
-rw-r--r-- | lib/cgi/cookie.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/cgi/cookie.rb b/lib/cgi/cookie.rb index ffd88b8edb..4cc050b90d 100644 --- a/lib/cgi/cookie.rb +++ b/lib/cgi/cookie.rb @@ -162,7 +162,7 @@ class CGI cookies = Hash.new([]) return cookies unless raw_cookie - raw_cookie.split(/[;,]\s?/).each do |pairs| + raw_cookie.split(/;\s?/).each do |pairs| name, values = pairs.split('=',2) next unless name and values name = CGI.unescape(name) |