Index: net/base/cookie_monster.cc |
=================================================================== |
--- net/base/cookie_monster.cc (revision 88927) |
+++ net/base/cookie_monster.cc (working copy) |
@@ -193,12 +193,6 @@ |
} |
// Get the normalized domain specified in cookie line. |
- // Note: The RFC says we can reject a cookie if the domain |
- // attribute does not start with a dot. IE/FF/Safari however, allow a cookie |
- // of the form domain=my.domain.com, treating it the same as |
- // domain=.my.domain.com -- for compatibility we do the same here. Firefox |
- // also treats domain=.....my.domain.com like domain=.my.domain.com, but |
- // neither IE nor Safari do this, and we don't either. |
url_canon::CanonHostInfo ignored; |
std::string cookie_domain(CanonicalizeHost(domain_string, &ignored)); |
if (cookie_domain.empty()) |
@@ -1826,23 +1820,6 @@ |
// value_start should point at the first character of the value. |
*value_start = *it; |
- // It is unclear exactly how quoted string values should be handled. |
- // Major browsers do different things, for example, Firefox supports |
- // semicolons embedded in a quoted value, while IE does not. Looking at |
- // the specs, RFC 2109 and 2965 allow for a quoted-string as the value. |
- // However, these specs were apparently written after browsers had |
- // implemented cookies, and they seem very distant from the reality of |
- // what is actually implemented and used on the web. The original spec |
- // from Netscape is possibly what is closest to the cookies used today. |
- // This spec didn't have explicit support for double quoted strings, and |
- // states that ; is not allowed as part of a value. We had originally |
- // implement the Firefox behavior (A="B;C"; -> A="B;C";). However, since |
- // there is no standard that makes sense, we decided to follow the behavior |
- // of IE and Safari, which is closer to the original Netscape proposal. |
- // This means that A="B;C" -> A="B;. This also makes the code much simpler |
- // and reduces the possibility for invalid cookies, where other browsers |
- // like Opera currently reject those invalid cookies (ex A="B" "C";). |
- |
// Just look for ';' to terminate ('=' allowed). |
// We can hit the end, maybe they didn't terminate. |
SeekTo(it, end, kValueSeparator); |