http.cookies.SimpleCookie.parse error after [keys] or some JSON data values #86111

Activity

1. xnovakj commented on Oct 5, 2020

   

   xnovakjmannequin

   on Oct 5, 2020

   Last edited by serhiy-storchaka

   MannequinAuthor

   More actions

   If brackets [] are around cookie name,
   next cookie names are not loaded.

   try:
     import http.cookies as Cookie
   except ImportError:
     import Cookie
   c = Cookie.SimpleCookie()
   c.load('id=12345; [object Object]=data; something=not loaded')
   print(c)

   Note:
   It could cause big problems with session etc.
   We found that Chrome/Edge starts to save and send this type of cookies for some (couple) users. The origin of that [object Object]=... cookies are probably some implementation of
   https://cookiepedia.co.uk/cookies/euconsent
   and errors somewhere in external javascripts or browsers?

   Related issues:
   https://bugs.python.org/issue41695
   https://bugs.python.org/issue27674

   The same problem occures in P3.7, P2.7, six.moves.http_cookies etc.

   I know RFT says that cookie-name can't use brackets.
   But you can set them to browser cookies.

   RFC 6265:

   set-cookie-header = "Set-Cookie:" SP set-cookie-string
    set-cookie-string = cookie-pair *( ";" SP cookie-av )
    cookie-pair       = cookie-name "=" cookie-value
    cookie-name       = token
    token             = <token, defined in [RFC2616], Section 2.2>
   
   RFC 2616:
   token          = 1*<any CHAR except CTLs or separators>
          separators     = "(" | ")" | "<" | ">" | "@"
                         | "," | ";" | ":" | "\" | <">
                         | "/" | "[" | "]" | "?" | "="
                         | "{" | "}" | SP | HT
   
2. xnovakj

   added

   3.7 (EOL)end of lifeend of life

   stdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directory

   type-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or error

   on Oct 5, 2020
3. xnovakj commented on Nov 5, 2020

   

   xnovakjmannequin

   on Nov 5, 2020

   MannequinAuthor

   More actions

   Possible patch, load parts one by one:

   http_cookie = 'id=12345; [object Object]=data; something=not_loaded'
   for cookie_key in http_cookie.split(';'):
     c.load(cookie_key)

   print c
   Set-Cookie: id=12345
   Set-Cookie: something=not_loaded
4. xnovakj commented on Jan 4, 2022

   

   xnovakjmannequin

   on Jan 4, 2022

   MannequinAuthor

   More actions

   New examples with the structured data.

   Problems are with quotes and spaces inside { or [

   cookie-script.com set those cookie data:
   CookieScriptConsent={"action":"accept","categories":"[\\"performance\\"]"}

   Python loads only cookies before that JSON structure

   >>> from http.cookies import SimpleCookie
   >>> ck = SimpleCookie()
   >>> ck.load('id=12345; CookieScriptConsent={"action":"accept","categories":"[\\"performance\\"]"}; something="not loaded"')
   >>> print(ck)
   Set-Cookie: id=12345
   
   This works:
   >>> ck.load('id=12345; complex_data={1:[1,2]}; something="loaded"')
   >>> print(ck)
   Set-Cookie: complex_data={1:[1,2]}
   Set-Cookie: id=12345
   Set-Cookie: something="loaded"
   
   This not works:
   >>> ck.load('id=12345; complex_data={1:[1, 2]}; something="not loaded"')
   >>> print(ck)
   Set-Cookie: complex_data={1:[1,
   Set-Cookie: id=12345

   Conclusion:
   Parsing JSON like cookie objects works, except quotes and without spaces.

   Exist some new RFC with JSON data support?
   How implementation/support/solution in diferent languages?
   Exist another Python library which support cookie with JSON data?
5. xnovakj

   added

   3.10 (EOL)end of lifeend of life

   and removed

   3.7 (EOL)end of lifeend of life

   on Jan 4, 2022
6. xnovakj

   changed the title [-]http.cookies.SimpleCookie.parse error after [keys][/-] [+]http.cookies.SimpleCookie.parse error after [keys] or some JSON data values[/+] on Jan 4, 2022
7. xnovakj

   added

   3.10 (EOL)end of lifeend of life

   and removed

   3.7 (EOL)end of lifeend of life

   on Jan 4, 2022
8. xnovakj

   changed the title [-]http.cookies.SimpleCookie.parse error after [keys][/-] [+]http.cookies.SimpleCookie.parse error after [keys] or some JSON data values[/+] on Jan 4, 2022
9. ezio-melotti

   transferred this issue fromon Apr 10, 2022
10. serhiy-storchaka

    added this to @serhiy-storchaka's project python-jsonon May 8, 2022
11. serhiy-storchaka

    added this to Cookies issues 🍪on May 20, 2022