lib/safe_cookies.rb in safe_cookies-0.1.0 vs lib/safe_cookies.rb in safe_cookies-0.1.1
- old
+ new
@@ -98,10 +98,10 @@
# Unfortunately there is no pretty way to touch a "Set-Cookie" header.
# It contains more information than the "HTTP_COOKIE" header from the
# browser's request contained, so a `Rack::Request` can't parse it for
# us. A `Rack::Response` doesn't offer a way either.
- headers['Set-Cookie'] = cookies.join(",") # cookies are comma-separated
+ headers['Set-Cookie'] = cookies.join("\n")
end
end
def secure?(cookie)
name = cookie.split('=').first.strip