develooper Front page | perl.libwww | Postings from April 2016

Re: Discouraging the use of HTTP::Cookies

Thread Previous
From:
Tom Hukins
Date:
April 17, 2016 15:48
Subject:
Re: Discouraging the use of HTTP::Cookies
Message ID:
20160417154820.GL26728@eborcom.com
On Sun, Apr 17, 2016 at 11:40:43AM -0400, Mark Gardner wrote:
> Another suggestion: submit PRs to port these CPAN dists to use
> HTTP::CookieJar[::LWP] instead of HTTP::Cookies:
> 
> https://metacpan.org/requires/distribution/HTTP-Cookies

Definitely!  I mentioned that in my talk last November and I intend to
work through some of the more popular modules listed.

However, some installations might rely on the bad behaviour.  We'll need
to think carefully before submitting patches.  Some years ago, LWP was
fixed to reject invalid SSL certificates when using https.  This made
environments more secure, but broke various people's working code
unexpectedly.

But yes, if anyone (including you and me) finds a module where moving
away from HTTP::Cookies makes sense, we should send a patch to make it
do so.

Tom

Thread Previous


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About