Stephane Landelle fb6eae1591 Validate cookie name and value characters ... Motivation: RFC6265 specifies which characters are allowed in a cookie name and value. Netty is currently too lax, which can used for HttpOnly escaping. Modification: In ServerCookieDecoder: discard cookie key-value pairs that contain invalid characters. In ClientCookieEncoder: throw an exception when trying to encode cookies with invalid characters. Drop old Cookie encoders and decoders that were deprecated in 4.1. Result: The problem described in the motivation section is fixed.		2015-05-10 21:05:29 +02:00
..
src/main	Validate cookie name and value characters	2015-05-10 21:05:29 +02:00
.gitignore	[#844] [#867] Add UDT transport	2013-01-07 21:06:22 +01:00
pom.xml	[maven-release-plugin] prepare for next development iteration	2015-03-03 08:30:59 -05:00