Title: gh-79096: Protect cookie file created by {LWP,Mozilla}CookieJar.save() by pSub · Pull Request #93463 · python/cpython · GitHub
Open Graph Title: gh-79096: Protect cookie file created by {LWP,Mozilla}CookieJar.save() by pSub · Pull Request #93463 · python/cpython
X Title: gh-79096: Protect cookie file created by {LWP,Mozilla}CookieJar.save() by pSub · Pull Request #93463 · python/cpython
Description: Cookies can store sensitive information and should therefore be protected against unauthorized third parties. This is also described in issue #79096. Note: This change is not effective on Microsoft Windows. The filesystem permissions are currently set to 644, everyone can read the file. This commit changes the permissions to 600, only the creater of the file can read and modify it. This improves security, because it reduces the attack surface. Now the attacker needs control of the user that created the cookie or a ways to circumvent the filesystems permissions. This change is backwards incompatible. Systems that rely on world-readable cookies will breake. However, one could argue that those are misconfigured in the first place.
Open Graph Description: Cookies can store sensitive information and should therefore be protected against unauthorized third parties. This is also described in issue #79096. Note: This change is not effective on Microsoft...
X Description: Cookies can store sensitive information and should therefore be protected against unauthorized third parties. This is also described in issue #79096. Note: This change is not effective on Microsoft...
Opengraph URL: https://github.com/python/cpython/pull/93463
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:ac43a6d3-4c88-9f04-6987-7baad6643f0e |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 9636:14EE64:5D9501:7DFCBA:6969B2DF |
| html-safe-nonce | 35ad4f9641faadb953b7253995eaafe669b3cd0509ac808f97fa979052a38e72 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5NjM2OjE0RUU2NDo1RDk1MDE6N0RGQ0JBOjY5NjlCMkRGIiwidmlzaXRvcl9pZCI6IjgzNDQxODA2MTk1NDA1NDIxNzUiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 3011121289177e2636852837493a67911d93cd4f6d477408f152ebd0fdef6005 |
| hovercard-subject-tag | pull_request:957368425 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/python/cpython/pull/93463/files |
| twitter:image | https://avatars.githubusercontent.com/u/83842?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/83842?s=400&v=4 |
| og:image:alt | Cookies can store sensitive information and should therefore be protected against unauthorized third parties. This is also described in issue #79096. Note: This change is not effective on Microsoft... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | b23b8fcc855cd29bb04d6c94aafa62d336bf44eefa8229444eecc968cad03aee |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/python/cpython git https://github.com/python/cpython.git |
| octolytics-dimension-user_id | 1525981 |
| octolytics-dimension-user_login | python |
| octolytics-dimension-repository_id | 81598961 |
| octolytics-dimension-repository_nwo | python/cpython |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 81598961 |
| octolytics-dimension-repository_network_root_nwo | python/cpython |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 0672399d88424758731ec07fe24509e23bb17fb5 |
| ui-target | canary-1 |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width