Summary

[intarweb] Expires attribute of set-cookie-parser should use rfc1123 dates

Metadata

• Id: 6f168436c854945393353428595fd450f853c90d
• Trac id: 1075
• Type: defect
• Reporter: RvdH
• Owner: sjamaan
• Cc:
• Status: closed
• Component: unknown
• Estimated difficulty:
• Resolution: fixed
• Priority: major
• Milestone: someday
• Version: 4.8.x
• Changetime: 2013-11-23 17:55:14 UTC
• Created: 2013-11-23 12:28:38 UTC
• Keywords:

Description

A comment in header-parsers.scm says:

 ;; We're using http-date-subparser for 'expires' instead of rfc850-subparser
 ;; (which would be the correct thing to do) because several well-known web
 ;; server software packages (tested: PHP and Rails) get it wrong.  So we
 ;; will go by the robustness principle and allow any kind of HTTP date.

But according to RFC6265 (http://tools.ietf.org/html/rfc6265#section-4.1) the Expires attribute should use RFC1123 dates, not RFC850 dates.

So I think (at least) the comment is not correct.

Changes and comments

[2013-11-23 17:55:14 UTC] sjamaan changed status from new to closed

[2013-11-23 17:55:14 UTC] sjamaan set resolution to fixed

[2013-11-23 17:55:14 UTC] sjamaan wrote:

Thanks for pointing out the mistake. I've corrected it to mention RFC1123, instead.