diff options
| author | Josh Chorlton <jchorlton@gmail.com> | 2016-10-27 23:10:26 +0800 |
|---|---|---|
| committer | Brad Fitzpatrick <bradfitz@golang.org> | 2016-10-28 16:44:44 +0000 |
| commit | d86a6ef0c7e8307802c6cd3f623bade3e78a42bf (patch) | |
| tree | eee5f18811ba1541c5454ab257a2c9fc7541cbde /src/text/template/exec_test.go | |
| parent | a8e86d99f18a72c8cbdedf5a47a9f7e93a87cd04 (diff) | |
| download | go-d86a6ef0c7e8307802c6cd3f623bade3e78a42bf.tar.xz | |
net/http: fix cookie Expires minimum year to 1601 instead of Epoch year 1970
Following RFC 6265 Section 5.1.1.5, ensure that the minimum
year for which an Expires value is valid and can be included in
the cookie's string, is 1601 instead of the Epoch year 1970.
A detailed specification for parsing the Expiry field is at:
https://tools.ietf.org/html/rfc6265#section-5.2.1
I stumbled across this bug due to this StackOverflow answer
that recommends setting the Expiry to the Epoch:
http://stackoverflow.com/a/5285982
Fixes #17632
Change-Id: I3c1bdf821d369320334a5dc1e4bf22783cbfe9fc
Reviewed-on: https://go-review.googlesource.com/32142
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Diffstat (limited to 'src/text/template/exec_test.go')
0 files changed, 0 insertions, 0 deletions