RFR: 8351983: HttpCookie Parser Incorrectly Handles Cookies with Expires Attribute [v11]

Volkan Yazici vyazici at openjdk.org
Fri Jun 20 07:37:30 UTC 2025


On Thu, 19 Jun 2025 15:12:20 GMT, Michael McMahon <michaelm at openjdk.org> wrote:

>> Hi,
>> 
>> This is a fix to j.n.HttpCookie (which has a doc/spec change). So, I'm targeting it to 26.
>> We currently do not obey the rule in RFC 6265 that says if both Max-Age and Expires attributes
>> are present in a cookie, the Max-Age should take precedence.
>> 
>> Thanks
>> Michael
>
> Michael McMahon has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains 18 additional commits since the last revision:
> 
>  - Merge branch 'master' into cookie-8351983
>  - apidoc update
>  - doc update from CSR review
>  - Merge branch 'master' into cookie-8351983
>  - Revert "impl update"
>    
>    This reverts commit b22113118ce68a5ba710be9072b208e9a36ae533.
>  - impl update
>  - test update
>  - test and impl update
>  - Merge branch 'master' into cookie-8351983
>  - copyright
>  - ... and 8 more: https://git.openjdk.org/jdk/compare/1356652f...3b71e4ff

Marked as reviewed by vyazici (Committer).

-------------

PR Review: https://git.openjdk.org/jdk/pull/25636#pullrequestreview-2944873085


More information about the net-dev mailing list