qnetworkcookie.cpp

Go to the documentation of this file.

// Copyright (C) 2016 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
 
#include "qnetworkcookie.h"
#include "qnetworkcookie_p.h"
 
#include "qnetworkrequest.h"
#include "qnetworkreply.h"
#include "QtCore/qbytearray.h"
#include "QtCore/qdatetime.h"
#include "QtCore/qdebug.h"
#include "QtCore/qlist.h"
#include "QtCore/qlocale.h"
#include <QtCore/qregularexpression.h>
#include "QtCore/qstring.h"
#include "QtCore/qstringlist.h"
#include "QtCore/qtimezone.h"
#include "QtCore/qurl.h"
#include "QtNetwork/qhostaddress.h"
#include "private/qobject_p.h"
 
QT_BEGIN_NAMESPACE
 
using namespace Qt::StringLiterals;
 
QT_IMPL_METATYPE_EXTERN(QNetworkCookie)
 
 
QNetworkCookie::QNetworkCookie(const QByteArray &name, const QByteArray &value)
    : d(new QNetworkCookiePrivate)
{
    qRegisterMetaType<QNetworkCookie>();
    qRegisterMetaType<QList<QNetworkCookie> >();
 
    d->name = name;
    d->value = value;
}
 
QNetworkCookie::QNetworkCookie(const QNetworkCookie &other)
    : d(other.d)
{
}
 
QNetworkCookie::~QNetworkCookie()
{
    // QSharedDataPointer auto deletes
    d = nullptr;
}
 
QNetworkCookie &QNetworkCookie::operator=(const QNetworkCookie &other)
{
    d = other.d;
    return *this;
}
 
bool QNetworkCookie::operator==(const QNetworkCookie &other) const
{
    if (d == other.d)
        return true;
    return d->name == other.d->name &&
        d->value == other.d->value &&
        d->expirationDate.toUTC() == other.d->expirationDate.toUTC() &&
        d->domain == other.d->domain &&
        d->path == other.d->path &&
        d->secure == other.d->secure &&
        d->comment == other.d->comment &&
        d->sameSite == other.d->sameSite;
}
 
bool QNetworkCookie::hasSameIdentifier(const QNetworkCookie &other) const
{
    return d->name == other.d->name && d->domain == other.d->domain && d->path == other.d->path;
}
 
bool QNetworkCookie::isSecure() const
{
    return d->secure;
}
 
void QNetworkCookie::setSecure(bool enable)
{
    d->secure = enable;
}
 
QNetworkCookie::SameSite QNetworkCookie::sameSitePolicy() const
{
    return d->sameSite;
}
 
void QNetworkCookie::setSameSitePolicy(QNetworkCookie::SameSite sameSite)
{
    d->sameSite = sameSite;
}
 
bool QNetworkCookie::isHttpOnly() const
{
    return d->httpOnly;
}
 
void QNetworkCookie::setHttpOnly(bool enable)
{
    d->httpOnly = enable;
}
 
bool QNetworkCookie::isSessionCookie() const
{
    return !d->expirationDate.isValid();
}
 
QDateTime QNetworkCookie::expirationDate() const
{
    return d->expirationDate;
}
 
void QNetworkCookie::setExpirationDate(const QDateTime &date)
{
    d->expirationDate = date;
}
 
QString QNetworkCookie::domain() const
{
    return d->domain;
}
 
void QNetworkCookie::setDomain(const QString &domain)
{
    d->domain = domain;
}
 
QString QNetworkCookie::path() const
{
    return d->path;
}
 
void QNetworkCookie::setPath(const QString &path)
{
    d->path = path;
}
 
QByteArray QNetworkCookie::name() const
{
    return d->name;
}
 
void QNetworkCookie::setName(const QByteArray &cookieName)
{
    d->name = cookieName;
}
 
QByteArray QNetworkCookie::value() const
{
    return d->value;
}
 
void QNetworkCookie::setValue(const QByteArray &value)
{
    d->value = value;
}
 
// ### move this to qnetworkcookie_p.h and share with qnetworkaccesshttpbackend
static QPair<QByteArray, QByteArray> nextField(QByteArrayView text, int &position, bool isNameValue)
{
    // format is one of:
    //    (1)  token
    //    (2)  token = token
    //    (3)  token = quoted-string
    const int length = text.size();
    position = nextNonWhitespace(text, position);
 
    int semiColonPosition = text.indexOf(';', position);
    if (semiColonPosition < 0)
        semiColonPosition = length; //no ';' means take everything to end of string
 
    int equalsPosition = text.indexOf('=', position);
    if (equalsPosition < 0 || equalsPosition > semiColonPosition) {
        if (isNameValue)
            return qMakePair(QByteArray(), QByteArray()); //'=' is required for name-value-pair (RFC6265 section 5.2, rule 2)
        equalsPosition = semiColonPosition; //no '=' means there is an attribute-name but no attribute-value
    }
 
    QByteArray first = text.mid(position, equalsPosition - position).trimmed().toByteArray();
    QByteArray second;
    int secondLength = semiColonPosition - equalsPosition - 1;
    if (secondLength > 0)
        second = text.mid(equalsPosition + 1, secondLength).trimmed().toByteArray();
 
    position = semiColonPosition;
    return qMakePair(first, second);
}
 
namespace {
 
constexpr QByteArrayView sameSiteNone() noexcept { return "None"; }
constexpr QByteArrayView sameSiteLax() noexcept { return "Lax"; }
constexpr QByteArrayView sameSiteStrict() noexcept { return "Strict"; }
 
QByteArrayView sameSiteToRawString(QNetworkCookie::SameSite samesite) noexcept
{
    switch (samesite) {
    case QNetworkCookie::SameSite::None:
        return sameSiteNone();
    case QNetworkCookie::SameSite::Lax:
        return sameSiteLax();
    case QNetworkCookie::SameSite::Strict:
        return sameSiteStrict();
    case QNetworkCookie::SameSite::Default:
        break;
    }
    return QByteArrayView();
}
 
QNetworkCookie::SameSite sameSiteFromRawString(QByteArrayView str) noexcept
{
    if (str.compare(sameSiteNone(), Qt::CaseInsensitive) == 0)
        return QNetworkCookie::SameSite::None;
    if (str.compare(sameSiteLax(), Qt::CaseInsensitive) == 0)
        return QNetworkCookie::SameSite::Lax;
    if (str.compare(sameSiteStrict(), Qt::CaseInsensitive) == 0)
        return QNetworkCookie::SameSite::Strict;
    return QNetworkCookie::SameSite::Default;
}
} // namespace
 
QByteArray QNetworkCookie::toRawForm(RawForm form) const
{
    QByteArray result;
    if (d->name.isEmpty())
        return result;          // not a valid cookie
 
    result = d->name;
    result += '=';
    result += d->value;
 
    if (form == Full) {
        // same as above, but encoding everything back
        if (isSecure())
            result += "; secure";
        if (isHttpOnly())
            result += "; HttpOnly";
        if (d->sameSite != SameSite::Default) {
            result += "; SameSite=";
            result += sameSiteToRawString(d->sameSite);
        }
        if (!isSessionCookie()) {
            result += "; expires=";
            result += QLocale::c().toString(d->expirationDate.toUTC(),
                                            "ddd, dd-MMM-yyyy hh:mm:ss 'GMT"_L1).toLatin1();
        }
        if (!d->domain.isEmpty()) {
            result += "; domain=";
            if (d->domain.startsWith(u'.')) {
                result += '.';
                result += QUrl::toAce(d->domain.mid(1));
            } else {
                QHostAddress hostAddr(d->domain);
                if (hostAddr.protocol() == QAbstractSocket::IPv6Protocol) {
                    result += '[';
                    result += d->domain.toUtf8();
                    result += ']';
                } else {
                    result += QUrl::toAce(d->domain);
                }
            }
        }
        if (!d->path.isEmpty()) {
            result += "; path=";
            result += d->path.toUtf8();
        }
    }
    return result;
}
 
static const char zones[] =
    "pst\0" // -8
    "pdt\0"
    "mst\0" // -7
    "mdt\0"
    "cst\0" // -6
    "cdt\0"
    "est\0" // -5
    "edt\0"
    "ast\0" // -4
    "nst\0" // -3
    "gmt\0" // 0
    "utc\0"
    "bst\0"
    "met\0" // 1
    "eet\0" // 2
    "jst\0" // 9
    "\0";
static const int zoneOffsets[] = {-8, -8, -7, -7, -6, -6, -5, -5, -4, -3, 0, 0, 0, 1, 2, 9 };
 
static const char months[] =
    "jan\0"
    "feb\0"
    "mar\0"
    "apr\0"
    "may\0"
    "jun\0"
    "jul\0"
    "aug\0"
    "sep\0"
    "oct\0"
    "nov\0"
    "dec\0"
    "\0";
 
static inline bool isNumber(char s)
{ return s >= '0' && s <= '9'; }
 
static inline bool isTerminator(char c)
{ return c == '\n' || c == '\r'; }
 
static inline bool isValueSeparator(char c)
{ return isTerminator(c) || c == ';'; }
 
static inline bool isWhitespace(char c)
{ return c == ' '  || c == '\t'; }
 
static bool checkStaticArray(int &val, QByteArrayView dateString, int at, const char *array, int size)
{
    if (dateString[at] < 'a' || dateString[at] > 'z')
        return false;
    if (val == -1 && dateString.size() >= at + 3) {
        int j = 0;
        int i = 0;
        while (i <= size) {
            const char *str = array + i;
            if (str[0] == dateString[at]
                && str[1] == dateString[at + 1]
                && str[2] == dateString[at + 2]) {
                val = j;
                return true;
            }
            i += int(strlen(str)) + 1;
            ++j;
        }
    }
    return false;
}
 
//#define PARSEDATESTRINGDEBUG
 
#define ADAY   1
#define AMONTH 2
#define AYEAR  4
 
/*
    Parse all the date formats that Firefox can.
 
    The official format is:
    expires=ddd(d)?, dd-MMM-yyyy hh:mm:ss GMT
 
    But browsers have been supporting a very wide range of date
    strings. To work on many sites we need to support more then
    just the official date format.
 
    For reference see Firefox's PR_ParseTimeStringToExplodedTime in
    prtime.c. The Firefox date parser is coded in a very complex way
    and is slightly over ~700 lines long.  While this implementation
    will be slightly slower for the non standard dates it is smaller,
    more readable, and maintainable.
 
    Or in their own words:
        "} // else what the hell is this."
*/
static QDateTime parseDateString(QByteArrayView dateString)
{
    QTime time;
    // placeholders for values when we are not sure it is a year, month or day
    int unknown[3] = {-1, -1, -1};
    int month = -1;
    int day = -1;
    int year = -1;
    int zoneOffset = -1;
 
    // hour:minute:second.ms pm
    static const QRegularExpression timeRx(
            u"(\\d\\d?):(\\d\\d?)(?::(\\d\\d?)(?:\\.(\\d{1,3}))?)?(?:\\s*(am|pm))?"_s);
 
    int at = 0;
    while (at < dateString.size()) {
#ifdef PARSEDATESTRINGDEBUG
        qDebug() << dateString.mid(at);
#endif
        bool isNum = isNumber(dateString[at]);
 
        // Month
        if (!isNum
            && checkStaticArray(month, dateString, at, months, sizeof(months)- 1)) {
            ++month;
#ifdef PARSEDATESTRINGDEBUG
            qDebug() << "Month:" << month;
#endif
            at += 3;
            continue;
        }
        // Zone
        if (!isNum
            && zoneOffset == -1
            && checkStaticArray(zoneOffset, dateString, at, zones, sizeof(zones)- 1)) {
            int sign = (at >= 0 && dateString[at - 1] == '-') ? -1 : 1;
            zoneOffset = sign * zoneOffsets[zoneOffset] * 60 * 60;
#ifdef PARSEDATESTRINGDEBUG
            qDebug() << "Zone:" << month;
#endif
            at += 3;
            continue;
        }
        // Zone offset
        if (!isNum
            && (zoneOffset == -1 || zoneOffset == 0) // Can only go after gmt
            && (dateString[at] == '+' || dateString[at] == '-')
            && (at == 0
                || isWhitespace(dateString[at - 1])
                || dateString[at - 1] == ','
                || (at >= 3
                    && (dateString[at - 3] == 'g')
                    && (dateString[at - 2] == 'm')
                    && (dateString[at - 1] == 't')))) {
 
            int end = 1;
            while (end < 5 && dateString.size() > at+end
                   && dateString[at + end] >= '0' && dateString[at + end] <= '9')
                ++end;
            int minutes = 0;
            int hours = 0;
            switch (end - 1) {
            case 4:
                minutes = dateString.mid(at + 3, 2).toInt();
                Q_FALLTHROUGH();
            case 2:
                hours = dateString.mid(at + 1, 2).toInt();
                break;
            case 1:
                hours = dateString.mid(at + 1, 1).toInt();
                break;
            default:
                at += end;
                continue;
            }
            if (end != 1) {
                int sign = dateString[at] == '-' ? -1 : 1;
                zoneOffset = sign * ((minutes * 60) + (hours * 60 * 60));
#ifdef PARSEDATESTRINGDEBUG
                qDebug() << "Zone offset:" << zoneOffset << hours << minutes;
#endif
                at += end;
                continue;
            }
        }
 
        // Time
        if (isNum && time.isNull()
            && dateString.size() >= at + 3
            && (dateString[at + 2] == ':' || dateString[at + 1] == ':')) {
            // While the date can be found all over the string the format
            // for the time is set and a nice regexp can be used.
            // This string needs to stay for as long as the QRegularExpressionMatch is used,
            // or else we get use-after-free issues:
            QString dateToString = QString::fromLatin1(dateString);
            if (auto match = timeRx.match(dateToString, at); match.hasMatch()) {
                int h = match.capturedView(1).toInt();
                int m = match.capturedView(2).toInt();
                int s = match.capturedView(3).toInt();
                int ms = match.capturedView(4).toInt();
                QStringView ampm = match.capturedView(5);
                if (h < 12 && !ampm.isEmpty())
                    if (ampm == "pm"_L1)
                        h += 12;
                time = QTime(h, m, s, ms);
#ifdef PARSEDATESTRINGDEBUG
                qDebug() << "Time:" << match.capturedTexts() << match.capturedLength();
#endif
                at += match.capturedLength();
                continue;
            }
        }
 
        // 4 digit Year
        if (isNum
            && year == -1
            && dateString.size() > at + 3) {
            if (isNumber(dateString[at + 1])
                && isNumber(dateString[at + 2])
                && isNumber(dateString[at + 3])) {
                year = dateString.mid(at, 4).toInt();
                at += 4;
#ifdef PARSEDATESTRINGDEBUG
                qDebug() << "Year:" << year;
#endif
                continue;
            }
        }
 
        // a one or two digit number
        // Could be month, day or year
        if (isNum) {
            int length = 1;
            if (dateString.size() > at + 1
                && isNumber(dateString[at + 1]))
                ++length;
            int x = dateString.mid(at, length).toInt();
            if (year == -1 && (x > 31 || x == 0)) {
                year = x;
            } else {
                if (unknown[0] == -1) unknown[0] = x;
                else if (unknown[1] == -1) unknown[1] = x;
                else if (unknown[2] == -1) unknown[2] = x;
            }
            at += length;
#ifdef PARSEDATESTRINGDEBUG
            qDebug() << "Saving" << x;
#endif
            continue;
        }
 
        // Unknown character, typically a weekday such as 'Mon'
        ++at;
    }
 
    // Once we are done parsing the string take the digits in unknown
    // and determine which is the unknown year/month/day
 
    int couldBe[3] = { 0, 0, 0 };
    int unknownCount = 3;
    for (int i = 0; i < unknownCount; ++i) {
        if (unknown[i] == -1) {
            couldBe[i] = ADAY | AYEAR | AMONTH;
            unknownCount = i;
            continue;
        }
 
        if (unknown[i] >= 1)
            couldBe[i] = ADAY;
 
        if (month == -1 && unknown[i] >= 1 && unknown[i] <= 12)
            couldBe[i] |= AMONTH;
 
        if (year == -1)
            couldBe[i] |= AYEAR;
    }
 
    // For any possible day make sure one of the values that could be a month
    // can contain that day.
    // For any possible month make sure one of the values that can be a
    // day that month can have.
    // Example: 31 11 06
    // 31 can't be a day because 11 and 6 don't have 31 days
    for (int i = 0; i < unknownCount; ++i) {
        int currentValue = unknown[i];
        bool findMatchingMonth = couldBe[i] & ADAY && currentValue >= 29;
        bool findMatchingDay = couldBe[i] & AMONTH;
        if (!findMatchingMonth || !findMatchingDay)
            continue;
        for (int j = 0; j < 3; ++j) {
            if (j == i)
                continue;
            for (int k = 0; k < 2; ++k) {
                if (k == 0 && !(findMatchingMonth && (couldBe[j] & AMONTH)))
                    continue;
                else if (k == 1 && !(findMatchingDay && (couldBe[j] & ADAY)))
                    continue;
                int m = currentValue;
                int d = unknown[j];
                if (k == 0)
                    qSwap(m, d);
                if (m == -1) m = month;
                bool found = true;
                switch(m) {
                    case 2:
                        // When we get 29 and the year ends up having only 28
                        // See date.isValid below
                        // Example: 29 23 Feb
                        if (d <= 29)
                            found = false;
                        break;
                    case 4: case 6: case 9: case 11:
                        if (d <= 30)
                            found = false;
                        break;
                    default:
                        if (d > 0 && d <= 31)
                            found = false;
                }
                if (k == 0) findMatchingMonth = found;
                else if (k == 1) findMatchingDay = found;
            }
        }
        if (findMatchingMonth)
            couldBe[i] &= ~ADAY;
        if (findMatchingDay)
            couldBe[i] &= ~AMONTH;
    }
 
    // First set the year/month/day that have been deduced
    // and reduce the set as we go along to deduce more
    for (int i = 0; i < unknownCount; ++i) {
        int unset = 0;
        for (int j = 0; j < 3; ++j) {
            if (couldBe[j] == ADAY && day == -1) {
                day = unknown[j];
                unset |= ADAY;
            } else if (couldBe[j] == AMONTH && month == -1) {
                month = unknown[j];
                unset |= AMONTH;
            } else if (couldBe[j] == AYEAR && year == -1) {
                year = unknown[j];
                unset |= AYEAR;
            } else {
                // common case
                break;
            }
            couldBe[j] &= ~unset;
        }
    }
 
    // Now fallback to a standardized order to fill in the rest with
    for (int i = 0; i < unknownCount; ++i) {
        if (couldBe[i] & AMONTH && month == -1) month = unknown[i];
        else if (couldBe[i] & ADAY && day == -1) day = unknown[i];
        else if (couldBe[i] & AYEAR && year == -1) year = unknown[i];
    }
#ifdef PARSEDATESTRINGDEBUG
        qDebug() << "Final set" << year << month << day;
#endif
 
    if (year == -1 || month == -1 || day == -1) {
#ifdef PARSEDATESTRINGDEBUG
        qDebug() << "Parser failure" << year << month << day;
#endif
        return QDateTime();
    }
 
    // Y2k behavior
    int y2k = 0;
    if (year < 70)
        y2k = 2000;
    else if (year < 100)
        y2k = 1900;
 
    QDate date(year + y2k, month, day);
 
    // When we were given a bad cookie that when parsed
    // set the day to 29 and the year to one that doesn't
    // have the 29th of Feb rather then adding the extra
    // complicated checking earlier just swap here.
    // Example: 29 23 Feb
    if (!date.isValid())
        date = QDate(day + y2k, month, year);
 
    QDateTime dateTime(date, time, QTimeZone::UTC);
 
    if (zoneOffset != -1)
        dateTime = dateTime.addSecs(zoneOffset);
 
    if (!dateTime.isValid())
        return QDateTime();
    return dateTime;
}
 
QList<QNetworkCookie> QNetworkCookie::parseCookies(QByteArrayView cookieString)
{
    // cookieString can be a number of set-cookie header strings joined together
    // by \n, parse each line separately.
    QList<QNetworkCookie> cookies;
    for (auto s : QLatin1StringView(cookieString).tokenize('\n'_L1))
        cookies += QNetworkCookiePrivate::parseSetCookieHeaderLine(s);
    return cookies;
}
 
QList<QNetworkCookie> QNetworkCookiePrivate::parseSetCookieHeaderLine(QByteArrayView cookieString)
{
    // According to http://wp.netscape.com/newsref/std/cookie_spec.html,<
    // the Set-Cookie response header is of the format:
    //
    //   Set-Cookie: NAME=VALUE; expires=DATE; path=PATH; domain=DOMAIN_NAME; secure
    //
    // where only the NAME=VALUE part is mandatory
    //
    // We do not support RFC 2965 Set-Cookie2-style cookies
 
    QList<QNetworkCookie> result;
    const QDateTime now = QDateTime::currentDateTimeUtc();
 
    int position = 0;
    const int length = cookieString.size();
    while (position < length) {
        QNetworkCookie cookie;
 
        // The first part is always the "NAME=VALUE" part
        QPair<QByteArray,QByteArray> field = nextField(cookieString, position, true);
        if (field.first.isEmpty())
            // parsing error
            break;
        cookie.setName(field.first);
        cookie.setValue(field.second);
 
        position = nextNonWhitespace(cookieString, position);
        while (position < length) {
            switch (cookieString.at(position++)) {
            case ';':
                // new field in the cookie
                field = nextField(cookieString, position, false);
 
                if (field.first.compare("expires", Qt::CaseInsensitive) == 0) {
                    position -= field.second.size();
                    int end;
                    for (end = position; end < length; ++end)
                        if (isValueSeparator(cookieString.at(end)))
                            break;
 
                    QByteArray dateString = cookieString.mid(position, end - position).trimmed().toByteArray().toLower();
                    position = end;
                    QDateTime dt = parseDateString(dateString);
                    if (dt.isValid())
                        cookie.setExpirationDate(dt);
                    //if unparsed, ignore the attribute but not the whole cookie (RFC6265 section 5.2.1)
                } else if (field.first.compare("domain", Qt::CaseInsensitive) == 0) {
                    QByteArrayView rawDomain = field.second;
                    //empty domain should be ignored (RFC6265 section 5.2.3)
                    if (!rawDomain.isEmpty()) {
                        QLatin1StringView maybeLeadingDot;
                        if (rawDomain.startsWith('.')) {
                            maybeLeadingDot = "."_L1;
                            rawDomain = rawDomain.mid(1);
                        }
 
                        //IDN domains are required by RFC6265, accepting utf8 as well doesn't break any test cases.
                        QString normalizedDomain = QUrl::fromAce(QUrl::toAce(QString::fromUtf8(rawDomain)));
                        if (!normalizedDomain.isEmpty()) {
                            cookie.setDomain(maybeLeadingDot + normalizedDomain);
                        } else {
                            //Normalization fails for malformed domains, e.g. "..example.org", reject the cookie now
                            //rather than accepting it but never sending it due to domain match failure, as the
                            //strict reading of RFC6265 would indicate.
                            return result;
                        }
                    }
                } else if (field.first.compare("max-age", Qt::CaseInsensitive) == 0) {
                    bool ok = false;
                    int secs = field.second.toInt(&ok);
                    if (ok) {
                        if (secs <= 0) {
                            //earliest representable time (RFC6265 section 5.2.2)
                            cookie.setExpirationDate(QDateTime::fromSecsSinceEpoch(0));
                        } else {
                            cookie.setExpirationDate(now.addSecs(secs));
                        }
                    }
                    //if unparsed, ignore the attribute but not the whole cookie (RFC6265 section 5.2.2)
                } else if (field.first.compare("path", Qt::CaseInsensitive) == 0) {
                    if (field.second.startsWith('/')) {
                        // ### we should treat cookie paths as an octet sequence internally
                        // However RFC6265 says we should assume UTF-8 for presentation as a string
                        cookie.setPath(QString::fromUtf8(field.second));
                    } else {
                        // if the path doesn't start with '/' then set the default path (RFC6265 section 5.2.4)
                        // and also IETF test case path0030 which has valid and empty path in the same cookie
                        cookie.setPath(QString());
                    }
                } else if (field.first.compare("secure", Qt::CaseInsensitive) == 0) {
                    cookie.setSecure(true);
                } else if (field.first.compare("httponly", Qt::CaseInsensitive) == 0) {
                    cookie.setHttpOnly(true);
                } else if (field.first.compare("samesite", Qt::CaseInsensitive) == 0) {
                    cookie.setSameSitePolicy(sameSiteFromRawString(field.second));
                } else {
                    // ignore unknown fields in the cookie (RFC6265 section 5.2, rule 6)
                }
 
                position = nextNonWhitespace(cookieString, position);
            }
        }
 
        if (!cookie.name().isEmpty())
            result += cookie;
    }
 
    return result;
}
 
void QNetworkCookie::normalize(const QUrl &url)
{
    // don't do path checking. See QTBUG-5815
    if (d->path.isEmpty()) {
        QString pathAndFileName = url.path();
        QString defaultPath = pathAndFileName.left(pathAndFileName.lastIndexOf(u'/') + 1);
        if (defaultPath.isEmpty())
            defaultPath = u'/';
        d->path = defaultPath;
    }
 
    if (d->domain.isEmpty()) {
        d->domain = url.host();
    } else {
        QHostAddress hostAddress(d->domain);
        if (hostAddress.protocol() != QAbstractSocket::IPv4Protocol
                && hostAddress.protocol() != QAbstractSocket::IPv6Protocol
                && !d->domain.startsWith(u'.')) {
            // Ensure the domain starts with a dot if its field was not empty
            // in the HTTP header. There are some servers that forget the
            // leading dot and this is actually forbidden according to RFC 2109,
            // but all browsers accept it anyway so we do that as well.
            d->domain.prepend(u'.');
        }
    }
}
 
#ifndef QT_NO_DEBUG_STREAM
QDebug operator<<(QDebug s, const QNetworkCookie &cookie)
{
    QDebugStateSaver saver(s);
    s.resetFormat().nospace();
    s << "QNetworkCookie(" << cookie.toRawForm(QNetworkCookie::Full) << ')';
    return s;
}
#endif
 
QT_END_NAMESPACE
 
#include "moc_qnetworkcookie.cpp"