ring-clojure / ring

Clojure HTTP server abstraction
MIT License
3.77k stars 520 forks source link

Use three-letter timezones from rfc822 in cookies #349

Closed kipz closed 7 months ago

kipz commented 6 years ago

Although the various specs prefer [1] numeric timezones allowed by rfc822 [2] for the cookie expires field, some browsers discard cookies with dates in this format (latest chrome and safari at the time of writing). Firefox does seem to respect this aspect of the specs.

I don't currently have any other supporting evidence, except that @neilprosser I have tried this on Linux with Chrome, Chromium and Firefox, and on OSx with Safari, Chrome and Firefox.

[1] https://tools.ietf.org/html/rfc1123#section-5.2.14 [2] https://tools.ietf.org/html/rfc822#section-5.1

Kudos to @neilprosser for spotting this!

weavejester commented 6 years ago

Thanks, I've added this to the list. If you find any supporting evidence between now and when I investigate, please add it to the thread.

youholemy commented 3 years ago

Nice to

youholemy commented 3 years ago

Nice