id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
6764	Invalid Cookies cause Stacktrace in middleware	Michael Axiak	nobody	"If someone uses !SessionMiddlware, any request with invalid cookies will result in a stack trace. For instance, someone visited a site with the cookie {{{""lang:xml=ru""}}}.

If one were to use wget, you can repeat this on a number of sites:
{{{
#!bash
 $ wget --header ""Cookie: lang:xml=ru"" http://www.djangoprojects.com
--09:06:39--  http://www.djangoproject.com/
           => `-'
Resolving www.djangoproject.com... 64.207.133.18
Connecting to www.djangoproject.com|64.207.133.18|:80... connected.
HTTP request sent, awaiting response... 500 Internal Server Error
09:06:40 ERROR 500: Internal Server Error.
}}}
(It's also amazing how many Django developers are lazy enough to leave !PythonDebug on, but that's not fixable.)

Attached is a patch to have invalid cookies result in no cookies at all, along with a test.

Someone might decide to emit a warning or something, that's not included in this patch.
"		closed	HTTP handling	dev		fixed	cookies, http		Ready for checkin	1	0	0	0	0	0