nginxinc / nginx-ldap-auth

Example of LDAP authentication using ngx_http_auth_request_module
BSD 2-Clause "Simplified" License
681 stars 202 forks source link

added urllib.unquote to escape urlencoded strings in cookies #48

Closed lastlegion closed 5 years ago

vl-homutov commented 5 years ago

The cookie value is not required to be urlencoded. In practice, you cannot use non-ASCII characters in cookies at all. If really required, this must be configurable. Rejecting this, to keep things simple, as a primary goal of this code is a reference implementation, not a universal implementation that fits everyone.