Actions
Bug #99032
open
Multiple Set-Cookie-Headers in Extbase-Responses are not sent to browser
Start date:
2022-11-09
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
11
PHP Version:
7.4
Tags:
Complexity:
easy
Is Regression:
Sprint Focus:
Stabilization Sprint
Description
If I add multiple HTTP-headers with the same name (e.g. "Set-Cookie") in Extbase-Controllers by adding them to the PSR-(Extbase-)Response, only the last one is sent to the browser.
The problem occurs in TYPO3\CMS\Extbase\Core\Bootstrap in line 202, when calling the header()-Method without making a difference if headers with multiple values should be replaced or added. Because of this behaviour, only the last Cookie is sent the the browser, because the last "Set-Cookie" overrides the previous one.
An identical problem existed in TYPO3 Core PSR-Responses, but was already fixed (see: https://forge.typo3.org/issues/88482).
This solution could also be adopted to Extbase to fix the described problem.
Updated by Markus Müller-Wipperfürth about 2 years ago
- Related to Bug #88482: Allow multi line headers for "Set-Cookie" headers added
Updated by Benni Mack 7 days ago
- Related to Bug #105591: ext:felogin does not delete fe_typo_user Cookie on logout added
Actions