[PATCH 3 of 3 V2] url: support auth.cookiefile for adding cookies to HTTP requests

Danek Duvall danek.duvall at oracle.com
Mon Apr 3 18:00:22 EDT 2017


Gregory Szorc wrote:

> +The following options apply to all hosts.
> +
> +``cookiefile``
> +    Path to a file containing HTTP cookie lines. Cookies matching a
> +    host will be sent automatically.
> +
> +    The file format uses the Mozilla cookies.txt or libwww-perl "Set-Cookie3"
> +    format. For specifics of each format, do an Internet search for
> +    "Netscape cookies.txt format" or "libwww-perl cookie format."
> +
> +    Note: the Mozilla cookies parser does not handle port numbers on domains.
> +    You will need to remove ports from the domain for the cookie to be
> +    recognized. This could result in a cookie being disclosed to an unwanted
> +    server.
> +
> +    The cookies file is read-only.

How is the user expected to add cookies to the file?  If the cookie is
regenerated frequently, this could be problematic.  Better than nothing,
perhaps, but still a pain.  Maybe a quick sentence or two on cookie file
management would be useful?

Danek


More information about the Mercurial-devel mailing list