bpo-2190: make MozillaCookieJar handle HTTP-only cookies by dlenski · Pull Request #22798 · python/cpython (original) (raw)

This resolves a longstanding issue with http.cookiejar.MozillaCookieJar, namely the fact that it does not know how to load or save cookies marked HTTP-only in the on-disk file format.

As discussed in bpo-2190, this file format is not obsolete (despite the fact that Mozilla/Firefox browsers no longer store cookies in it).

cURL's -b/-c options still load and store cookies in this format, including marking cookies as HTTP-only in this way.

With these changes applied, MozillaCookieJar will…

1. Correctly .load HTTP-only cookies,
2. Add a Cookie.httponly attribute to mark them as such, and
3. Correctly .save cookies with httponly == True

https://bugs.python.org/issue2190