Marco Z

@tusharad could you please check whether previous versions of scotty have the same behaviour? I suspect not because the changes introduced in 0.22 move the files parsing behaviour to wai-extra....

Thanks @tusharad for checking! This is odd and unintuitive behaviour, but I'm at least glad that it didn't appear in 0.22 . Question now is, what's the cause of this,...

@tusharad Yes, this fix seems sensible but it's also a breaking change that should be documented as such. Happy to review your PR!

code from here could be recycled for this purpose : https://hackage.haskell.org/package/scotty-session-0.0.5/docs/Web-Scotty-Session.html#t:ScottySM but using scotty internal cookie functions

Hi @k0001 , I checked out cryptocookie, seems it would be sensible to introduce it as a good security default. I just have a hard time following the continuation-based API,...

@pbrinkmeier A PR would be very appreciated!

@tusharad good point! I have actually just found out that sqlite-simple too is due some love, if only to fix that .. simple [`sql QuasiQuoter`](https://hackage.haskell.org/package/sqlite-simple-0.4.19.0/docs/src/Database.SQLite.Simple.QQ.html#sql) (i.e. I don't think embedding...

The default error handler where this behaviour needs to be updated is called `defH` : https://github.com/scotty-web/scotty/blob/7e8739d7ac1e9c474229deca07a7ba4c857496b2/Web/Scotty/Action.hs#L90C1-L90C1

#121 is also relevant for this

@ip1981 @magthe In our current design (as of 0.21 let's say : https://github.com/scotty-web/scotty/blob/66d60f7a6828c7e9f8c7d2dc49e9597e7278b982/Web/Scotty/Action.hs#L113-L176 ) we have a cascade of handlers, which is where the exception to HTTP status translation takes...