SATOSA
SATOSA copied to clipboard
"Unknown Error" on weird cookie with space in value
Code Version
8.4.0
Expected Behavior
If the browser sends Cookie: foo: bar boo; SATOSA...
, the cookie foo
should be ignored.
Current Behavior
It fails with "Unknown error"
Possible Solution
Filter out those weird cookies on apache/nginx?
Steps to Reproduce
- create a cookie with a space in value. For example using JS:
document.cookie = "foo=bar boo; path=/; domain=.univ.fr
- try to login