Project

General

Profile

Actions

Bug #99032

open

Multiple Set-Cookie-Headers in Extbase-Responses are not sent to browser

Added by Markus Müller-Wipperfürth over 1 year ago. Updated 9 months ago.

Status:
New
Priority:
Should have
Assignee:
-
Category:
Extbase
Target version:
Start date:
2022-11-09
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
11
PHP Version:
7.4
Tags:
Complexity:
easy
Is Regression:
Sprint Focus:
Stabilization Sprint

Description

If I add multiple HTTP-headers with the same name (e.g. "Set-Cookie") in Extbase-Controllers by adding them to the PSR-(Extbase-)Response, only the last one is sent to the browser.

The problem occurs in TYPO3\CMS\Extbase\Core\Bootstrap in line 202, when calling the header()-Method without making a difference if headers with multiple values should be replaced or added. Because of this behaviour, only the last Cookie is sent the the browser, because the last "Set-Cookie" overrides the previous one.

An identical problem existed in TYPO3 Core PSR-Responses, but was already fixed (see: https://forge.typo3.org/issues/88482).
This solution could also be adopted to Extbase to fix the described problem.


Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Bug #88482: Allow multi line headers for "Set-Cookie" headersClosed2019-06-03

Actions
Actions

Also available in: Atom PDF