You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
BUG Describtion:
The function "formatCookieDomain" in cookie.go does not work correctly when the top-level domain is multi-level.(such as: org.cn)
For example, my domain is "www.example.org.cn", if users access my website by the URL"www.example.org.cn", iris' session work correctly.But ,as we known, users can also access my website by the URL "example.org.cn". In this time , the function "formatCookieDomain" does not have expected output. It prases "example.org.cn" to "org.cn",so session id is refused by the browser.
The text was updated successfully, but these errors were encountered:
AlexPeiran
changed the title
[BUG]Session works incorrectly when meet the multi-level TLDs
[BUG]Session works incorrectly when meets the multi-level TLDs
Dec 18, 2019
Hello @AlexPeiran, thanks for the report. It should be fixed now, I tested it locally and it passes but you need to verify it, could you please try by downloading the master branch?
Run this terminal command on your project's directory (at the go.mod):
iris version:V12.1.1
golang version:1.13.4
OS:Ubuntu 16.04 LTS
BUG Describtion:
The function "formatCookieDomain" in cookie.go does not work correctly when the top-level domain is multi-level.(such as: org.cn)
For example, my domain is "www.example.org.cn", if users access my website by the URL"www.example.org.cn", iris' session work correctly.But ,as we known, users can also access my website by the URL "example.org.cn". In this time , the function "formatCookieDomain" does not have expected output. It prases "example.org.cn" to "org.cn",so session id is refused by the browser.
The text was updated successfully, but these errors were encountered: