diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2021-05-16 23:38:35 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2021-05-17 10:57:03 +0200 |
| commit | 5dfa4c08bbef38f9e533439d11f27096bb09d41c (patch) | |
| tree | 0955c4c970ca92c4b84599b404ebcad0534b7c7f /docs/cmdline-opts | |
| parent | e38a8265721e7be07799d07ec843f7ac26f0031b (diff) | |
| download | curl-5dfa4c08bbef38f9e533439d11f27096bb09d41c.tar.gz | |
docs: cookies from HTTP headers need domain set
... or the cookies won't get sent. Push users to using the "Netscape"
format instead, which curl uses when saving a cookie "jar".
Reported-by: Martin Dorey
Reviewed-by: Daniel Gustafsson
Fixes #6723
Closes #7077
Diffstat (limited to 'docs/cmdline-opts')
| -rw-r--r-- | docs/cmdline-opts/cookie.d | 12 |
1 files changed, 4 insertions, 8 deletions
diff --git a/docs/cmdline-opts/cookie.d b/docs/cmdline-opts/cookie.d index d5e63e427..5c40cf2d8 100644 --- a/docs/cmdline-opts/cookie.d +++ b/docs/cmdline-opts/cookie.d @@ -22,14 +22,10 @@ The file format of the file to read cookies from should be plain HTTP headers The file specified with --cookie is only used as input. No cookies will be written to the file. To store cookies, use the --cookie-jar option. -Exercise caution if you are using this option and multiple transfers may -occur. If you use the NAME1=VALUE1; format, or in a file use the Set-Cookie -format and don't specify a domain, then the cookie is sent for any domain -(even after redirects are followed) and cannot be modified by a server-set -cookie. If the cookie engine is enabled and a server sets a cookie of the same -name then both will be sent on a future transfer to that server, likely not -what you intended. To address these issues set a domain in Set-Cookie (doing -that will include sub domains) or use the Netscape format. +If you use the Set-Cookie file format and don't specify a domain then the +cookie is not sent since the domain will never match. To address this, set a +domain in Set-Cookie line (doing that will include sub-domains) or preferably: +use the Netscape format. This option can be used multiple times. |