Rack::Lint and Set-Cookie

Rack::Lint and Set-Cookie

[agilesoftware]

in Utils.set_cookie_header!(header, key, value)

  case header["Set-Cookie"]
      when Array
        header["Set-Cookie"] << cookie
      when String
        header["Set-Cookie"] = [header["Set-Cookie"], cookie]
      when nil
        header["Set-Cookie"] = cookie
      end

but in Rack::Lint:

    def check_headers(header)
      header.each { |key, value|
         .......
        assert("a header value must be a String, but the value of " +
          "'#{key}' is a #{value.class}") { value.kind_of? String }
        ## consisting of lines (for multiple header values, e.g.
multiple
        ## <tt>Set-Cookie</tt> values) seperated by "\n".
        value.split("\n").each { |item|
          ## The lines must not contain characters below 037.
          assert("invalid header value #{key}: #{item.inspect}") {
            item !~ /[\000-\037]/
          }
        }
      }
    end


So if I have any Set-Cookie header set in my Rack application, Lint
will fail.

Re: Rack::Lint and Set-Cookie

[Eric Wong]

agilesoftware <agilesoftware@gmail.com> wrote:
> in Utils.set_cookie_header!(header, key, value)
> 
>   case header["Set-Cookie"]
>       when Array
>         header["Set-Cookie"] << cookie
>       when String
>         header["Set-Cookie"] = [header["Set-Cookie"], cookie]
>       when nil
>         header["Set-Cookie"] = cookie
>       end
> 
> but in Rack::Lint:
> 
>     def check_headers(header)
>       header.each { |key, value|
>          .......
>         assert("a header value must be a String, but the value of " +
>           "'#{key}' is a #{value.class}") { value.kind_of? String }
>         ## consisting of lines (for multiple header values, e.g.
> multiple
>         ## <tt>Set-Cookie</tt> values) seperated by "\n".
>         value.split("\n").each { |item|
>           ## The lines must not contain characters below 037.
>           assert("invalid header value #{key}: #{item.inspect}") {
>             item !~ /[\000-\037]/
>           }
>         }
>       }
>     end
> 
> 
> So if I have any Set-Cookie header set in my Rack application, Lint
> will fail.

Hi,

If your header is a Rack::Utils::HeaderHash object, then header.each
should be yielding strings in Rack 1.1.0:

------------- rack-1.1.0/lib/rack/utils.rb -------------------
    class HeaderHash < Hash
      # snipped
      def each
        super do |k, v|
          yield(k, v.respond_to?(:to_ary) ? v.to_ary.join("\n") : v)
        end
      end
--------------------------------------------------------------

On the other hand, another user reported something similar on the
Unicorn mailing list, too (still unresolved):

  http://mid.gmane.org/AAD43046-6AF4-4685-933D-41F7E1DC0795@meticulo.com

I could not reproduce the issue when I tried...

-- 
Eric Wong