Attachment 159049 Details for Bug 247972 – additional patch (also needs svn commit)

[patch] additional patch (also needs svn commit)

cve-2007-3382.patch (text/plain), 1.23 KB, created by Mark J. Cox on 2007-07-12 13:36:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mark J. Cox

Created: 2007-07-12 13:36:47 UTC

Size: 1.23 KB

patch

obsolete

>Index: Cookies.java
>===================================================================
>--- Cookies.java	(revision 554799)
>+++ Cookies.java	(working copy)
>@@ -249,7 +249,7 @@
>             int endValue=startValue;
>
>             cc=bytes[pos];
>-            if(  cc== '\'' || cc=='"' ) {
>+            if( cc=='"' ) {
>                 endValue=findDelim3( bytes, startValue+1, end, cc );
>                 if (endValue == -1) {
>                     endValue=findDelim2( bytes, startValue+1, end );
>@@ -412,7 +412,7 @@
>     /**
>      *
>      * Strips quotes from the start and end of the cookie string
>-     * This conforms to RFC 2109
>+     * This conforms to RFC 2965
>      *
>      * @param value            a <code>String</code> specifying the
>cookie
>      *                         value (possibly quoted).
>@@ -423,8 +423,7 @@
>     private static String stripQuote( String value )
>     {
>         //        log("Strip quote from " + value );
>-        if (((value.startsWith("\"")) && (value.endsWith("\""))) ||
>-            ((value.startsWith("'") && (value.endsWith("'"))))) {
>+        if (value.startsWith("\"") && value.endsWith("\"")) {
>             try {
>                 return value.substring(1,value.length()-1);
>             } catch (Exception ex) {
>
>
>
>

Actions: View | Diff

Attachments on bug 247972: 159049