Path: csiph.com!usenet.pasdenom.info!news.albasani.net!rt.uk.eu.org!newsfeed.xs4all.nl!newsfeed1.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.000 X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; '(at': 0.04; 'subject:Python': 0.06; 'contributor': 0.07; 'modify': 0.07; 'attributes': 0.09; 'cookie': 0.09; 'except:': 0.09; 'imported': 0.09; 'lawrence': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'subject:2.7': 0.09; 'tests,': 0.09; 'try:': 0.09; 'python': 0.11; 'bug': 0.12; 'jan': 0.12; '2.7': 0.14; 'mostly': 0.14; 'changes': 0.15; '2.7?': 0.16; 'formatted': 0.16; 'pass;': 0.16; 'possible?': 0.16; 'received:80.91.229.3': 0.16; 'received:plane.gmane.org': 0.16; 'reedy': 0.16; 'volunteers.': 0.16; 'fix': 0.17; 'wrote:': 0.18; 'commit': 0.19; 'properly': 0.19; 'written': 0.21; 'import': 0.22; 'tests': 0.22; 'header:User-Agent:1': 0.23; 'parse': 0.24; 'propose': 0.24; 'tracker': 0.26; 'post': 0.26; 'least': 0.26; 'header:X -Complaints-To:1': 0.27; 'header:In-Reply-To:1': 0.27; 'fixed': 0.29; 'url:bugs': 0.29; 'patch': 0.29; "doesn't": 0.30; 'said,': 0.30; 'code': 0.31; 'correctly.': 0.31; 'question:': 0.31; 'relies': 0.31; 'file': 0.32; 'run': 0.32; 'url:python': 0.33; 'could': 0.34; 'test': 0.35; 'but': 0.35; 'there': 0.35; 'hi,': 0.36; 'url:org': 0.36; 'changing': 0.37; 'focused': 0.38; 'somebody': 0.38; 'needed': 0.38; 'whatever': 0.38; 'to:addr :python-list': 0.38; 'files': 0.38; 'pm,': 0.38; 'received:71': 0.39; 'to:addr:python.org': 0.39; 'received:org': 0.40; 'extended': 0.61; 'issues,': 0.61; 'no.': 0.61; 'simple': 0.61; 'guarantee': 0.63; 'skip:n 10': 0.64; 'more': 0.64; 'attention.': 0.68; '(internet)': 0.84; '2.7.': 0.84; 'readiness': 0.84; 'received:fios.verizon.net': 0.84; 'subject: #': 0.96 X-Injected-Via-Gmane: http://gmane.org/ To: python-list@python.org From: Terry Reedy Subject: Re: Backport fix on #16611 to Python 2.7 Date: Tue, 17 Jun 2014 23:31:30 -0400 References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Gmane-NNTP-Posting-Host: pool-71-175-90-87.phlapa.fios.verizon.net User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 In-Reply-To: X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 47 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1403062313 news.xs4all.nl 2836 [2001:888:2000:d::a6]:44002 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:73348 On 6/17/2014 9:08 PM, Mark Lawrence wrote: > On 18/06/2014 01:56, Makoto Kuwata wrote: >> Hi, >> >> I found a bug on SimpleCookie#load() which doesn't parse >> 'secure' and 'httponly' attributes correctly. >> >> try: >> from Cookie import SimpleCookie >> except: >> from http.cookies import SimpleCookie >> ck = SimpleCookie() >> ck.load('name1=value1; Path=/xxx; httponly; secure') >> print(ck.output()) #=> Set-Cookie: name1=value1; Path=/xxx >> # (Missing 'httponly' and 'secure' attributes on Python < >> 3.3.2!) >> >> >> This bug has been registered as #16611, and fixed on 3.3.3. >> But it is not backported into Python 2.7. >> http://bugs.python.org/issue16611 >> >> My question: Is there any plan to backport the fix to Python 2.7? Do you have any plan to upgrade to 3.4, so you get *all* the bugfixes possible? > The simple answer is no. The longer answer is, if you want to propose a > patch to backport the fix, it's more likely that somebody will do the > work to commit it as support for 2.7 has been extended until 2020. > Please note that I said "more likely", there's no guarantee given that > Python relies so much on volunteers. The extended support is mostly focused on build (compiler) and security (internet) issues, to support software already written and *working* on 2.7. That said, if someone were to modify the patch to it could be imported to 2.7 (at least changing file names) or make changes to the relevant files by hand; run the tests, with whatever changes are needed so that they do run; and change the code as needed so all tests pass; sign the contributor agreement; and post a properly formatted test to the tracker and indicate a readiness to respond to comments; then it might get some attention. -- Terry Jan Reedy