From ca2fc55d2b897b23dd44348eafb8419fbb09d5aa Mon Sep 17 00:00:00 2001 From: roytam1 Date: Thu, 26 Oct 2023 11:29:01 +0800 Subject: [PATCH] import from UXP: [network] Block more invalid cookie name characters. (38f8fde3) --- netwerk/cookie/nsCookieService.cpp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/netwerk/cookie/nsCookieService.cpp b/netwerk/cookie/nsCookieService.cpp index 1eb112522..186a9f444 100644 --- a/netwerk/cookie/nsCookieService.cpp +++ b/netwerk/cookie/nsCookieService.cpp @@ -3439,7 +3439,8 @@ nsCookieService::SetCookieInternal(nsIURI *aHostURI, 0x0D, 0x0E, 0x0F, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, - 0x1F, /* 0x20, */ 0x00 }; + 0x1F, /* 0x20, */ 0x3B, 0x3D, 0x7F, + 0x00 }; if (cookieAttributes.name.FindCharInSet(illegalNameCharacters, 0) != -1) { COOKIE_LOGFAILURE(SET_COOKIE, aHostURI, savedCookieHeader, "invalid name character"); return newCookie;