TonyDev314

Results 3 comments of TonyDev314

I believe that the leading . means that the cookie should be included in all subdomains The "." was deemed no longer necessary in this spec: https://www.rfc-editor.org/rfc/rfc6265#section-4.1.2.3 But then the...

Surely you have to change the matching algorithm though. At present the match must be exact between the URL domain and the cookie domain. So whether or not a leading...

It works if you include the "." in the cookie retained. That requires further change Need to store a cookie ".mywebsite.com" such that it matches requests to www.mywebsite.com AND www.foo.mywebsite.com...