jetty.project
jetty.project copied to clipboard
Support cookie name prefixes
Jetty version(s) 10+
Enhancement Description
RFC 6265-bis (https://datatracker.ietf.org/doc/draft-ietf-httpbis-rfc6265bis/) is currently a draft but outlines cookie name prefixes, in particular __secure- and __host-.
This should only be relevant for the client, as it should discard prefixed cookies if they don't meet the required criteria. On the server, applications decide the cookie name, and should set them with the proper attributes.
Hello, Is this issue suitable as "good first issue" for newcomers?
@arsenalzp this could be a good one, but slightly more complicated than others, and the specification is still in draft.
I'll mention you in another issue that should be simpler to implement.
This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions.