curl-users
Cookie parsing error in Curl 7.4.1
Date: Thu, 09 Nov 2000 13:50:46 CST
[ Bug #122073 ] Incorrect Cookie handling during series of redirects
Date:
2000-Nov-09 13:30
Submitted By:
none Assigned To:
none
Category:
http Priority:
5
Bug Group:
wrong behaviour Resolution:
None
Summary:
Incorrect Cookie handling during series of redirects
Original Submission:
Curl Version 7.4.1
During a series of redirects, the cookie set in an an earlier server
response is NOT sent with the redirected GET request.
Attached is the ourput of 'curl -v -i -L'
Notice the SafeRedirect cookie set for
domain=216.33.236.250, but the new GET request to the
domain does NOT have the Cookie set.
The other bug that needs to be fixed is default Port number should NOT be
set in 'Host: ' header - per Changes list, this one is already fixed
* Connected to 216.33.236.250 (216.33.236.250)
>GET
>/cgi-bin/saferd?_lang=EN&hm___tg=http%3a%2f%2f216%2e33%2e236%2e250%2fcgi%2dbin%2fgetmsg&hm___qs=curmbox%3dF000000001%26a%3d205197256205134705%26msg%3dMSG973789696%2e13%26start%3d10%26len%3d8776%26raw%3d0%26disk%3d216%2e33%2e236%2e68_d1042%26login%3dmvr707%26domain%3dhotmail%2ecom&hm___ts=973797081&hm___ha=7b8e28bbc8f87ebaa0984e906e70e582&domain=hotmail.com
>HTTP/1.0
User-Agent: curl/7.4.1 (sparc-sun-solaris2.7) libcurl 7.4.1 (SSL 0.9.6)
Host: 216.33.236.250:80
Pragma: no-cache
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
HTTP/1.0 302 Redirected
Server: Microsoft-IIS/5.0
Date: Thu, 09 Nov 2000 19:12:13 GMT
Set-Cookie:
SafeRedirect=%26hm___ts%3d973797081%26hm___ha%3d7b8e28bbc8f87ebaa0984e906e70e582;
domain=216.33.236.250; path=/
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Location:
http://216.33.236.250/cgi-bin/getmsg?curmbox=F000000001&a=205197256205134705&msg=MSG973789696.13&start=1442230&len=8776&raw=0&disk=216.33.236.68_d1042&login=mvr707&domain=hotmail.com
HMServer: H: F232 V: WIN2K 09.01.40.0005 i D: Nov 2 2000 18:07:42
* Follows Location: to new URL:
'http://216.33.236.250/cgi-bin/getmsg?curmbox=F000000001&a=205197256205134705&msg=MSG973789696.13&start=1442230&len=8776&raw=0&disk=216.33.236.68_d1042&login=mvr707&domain=hotmail.com'
* Connected to 216.33.236.250 (216.33.236.250)
>GET
>/cgi-bin/getmsg?curmbox=F000000001&a=205197256205134705&msg=MSG973789696.13&start=1442230&len=8776&raw=0&disk=216.33.236.68_d1042&login=mvr707&domain=hotmail.com
>HTTP/1.0
User-Agent: curl/7.4.1 (sparc-sun-solaris2.7) libcurl 7.4.1 (SSL 0.9.6)
Host: 216.33.236.250:80
Pragma: no-cache
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
HTTP/1.0 200 OK
Server: Microsoft-IIS/5.0
Date: Thu, 09 Nov 2000 19:12:14 GMT
Expires: Mon, 01 Jan 1999 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
HMServer: H: F202 V: WIN2K 09.01.40.0005 i D: Nov 2 2000 18:07:42
<!-- reauthhead.asp -->
<html>
<head>
<title>Hotmail Sign In Access Error</title>
</head>
<body bgcolor="#ffffff" topmargin=0>
<center>
<form name="passwordform" action="" method="POST" target="_top"
AUTOCOMPLETE="OFF" >
<table cellpadding=0 cellspacing=0 b
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
Received on 2000-11-09