aboutsummaryrefslogtreecommitdiff
path: root/debian/patches/05_do-not-ascribe-cookies-to-the-target-domain.patch
blob: 3dd3bba85a4e739437938d8395fe077887b69d58 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Description: Session fixation and cookie stealing.
 See http://www.openwall.com/lists/oss-security/2015/03/14/4 for a complete
 description.
Origin: https://github.com/kennethreitz/requests/commit/3bd8afbff29e50b38f889b2f688785a669b9aafc
Bug-Debian: https://bugs.debian.org/780506

--- a/requests/sessions.py
+++ b/requests/sessions.py
@@ -168,7 +168,7 @@
             except KeyError:
                 pass
 
-            extract_cookies_to_jar(prepared_request._cookies, prepared_request, resp.raw)
+            extract_cookies_to_jar(prepared_request._cookies, req, resp.raw)
             prepared_request._cookies.update(self.cookies)
             prepared_request.prepare_cookies(prepared_request._cookies)