Hi,

I prepared a patch to check the Set-Cookie domain values for being Public
Suffices using libpsl. This is mainly for detecting and preventing
'Supercookies' being set by 'bad' web servers.

Here are some references for more detailed information:
https://publicsuffix.org/
https://github.com/publicsuffix/list
https://github.com/rockdaboot/libpsl

The patch is missing a test case - it was not obvious for me how to prevent
such a test being performed when libpsl is not compiled in.
I added 'has_psl' to test/runtests.pl but here I am stuck.
If you could give me a hint on that (please with a test number), I'll make up
a test case.

On Debian, Fedora, Arch and maybe some other distros libpsl has already been
packaged (Debian: libpsl-dev, libpsl0:amd64, libpsl0-dbg:amd64, psl).

Please review / test the patch.

Regards, Tim

Received on 2015-09-29