Jobec_45051
Nov 01, 2011Nimbostratus
Cookie bug in ProxyPass V10 iRule ?
Hi All,
I think I've found a bug concerning cookies in the ProxyPass v10 iRule (http://devcentral.f5.com/wiki/iRules.ProxyPassv10.ashx).
We had a Safari browser not honoring the domain attribute of our cookies. I then found out it was because there was a dot at the end of the domain attribute. When reviewing RFC 6265 about cookies (http://tools.ietf.org/html/rfc6265) I can see that this is expected behavior. Chapter 4.1.2.3. The Domain Attribute of the RFC states:
"but a trailing %x2E ("."), if present, will cause the user agent to ignore the attribute."
So I think line 413 of the iRule should be something like:
set elementvalue [string trimright $elementvalue "."]
and line 420:
set elementvalue ".$elementvalue"
Is there anyone else that ran into this problem before? Setting the domain attribute isn't that common of course.