-
-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: warn on invalid cookie name characters #12806
Conversation
🦋 Changeset detectedLatest commit: 7756acc The changes in this PR will be included in the next version bump. This PR includes changesets to release 1 package
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
…to warn-cookie-name
@@ -113,6 +116,14 @@ export function get_cookies(request, url, trailing_slash) { | |||
* @param {import('./page/types.js').Cookie['options']} options | |||
*/ | |||
set(name, value, options) { | |||
// TODO: remove this check in 3.0 | |||
const illegal_characters = name.match(INVALID_COOKIE_CHARACTER_REGEX); | |||
if (illegal_characters) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should we only warn once per cookie name? Else you might get flooded depending on how often you use them
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I dunno. We really don't want folks to miss this or their apps will break. If it's just one line in a thousand that their app logs then they might overlook it. I don't think this is terrible. Most people won't be affected, but we really do want folks to see it when they are
closes #12799
Adds a warning at dev time of which characters in the cookie name are invalid according to the RFC
Please don't delete this checklist! Before submitting the PR, please make sure you do the following:
Tests
pnpm test
and lint the project withpnpm lint
andpnpm check
Changesets
pnpm changeset
and following the prompts. Changesets that add features should beminor
and those that fix bugs should bepatch
. Please prefix changeset messages withfeat:
,fix:
, orchore:
.Edits