[Cgi-session-user] Patch available for Safari issue with handling of Expires vs. Max-Age in cookie handling..affects CGI::Simple compat

[Mark S. <ma...@su...>]

There is now a patch available which makes our cookie generation more 
RFC-compliant and should fix the issue reported with Safari:

http://rt.cpan.org/Ticket/Display.html?id=34216#txn-438169

Note that it makes use of the "max_age" method added in CGI.pm around 
2.8x. We don't currently require any version of CGI.pm, but perhaps we 
could.

Related to this, CGI::Simple would have supported the old "expires" 
interface, but it does *not* yet support the "max_age" feature. So the 
fix for better RFC compliance may break for those using CGI::Simple.

A separate bug has been filed to fix CGI::Simple.

If someone wanted to quickly generate a patch for improving CGI::Simple 
in this way, we could possibly wait for that to ease the transition.

http://rt.cpan.org/Ticket/Display.html?id=34310


    Mark

-- 
  . . . . . . . . . . . . . . . . . . . . . . . . . . .
    Mark Stosberg            Principal Developer
    ma...@su...     Summersault, LLC
    765-939-9301 ext 202     database driven websites
  . . . . . http://www.summersault.com/ . . . . . . . .