From f2a6c0477fd95518ffb4fcea8e655a9062874bd2 Mon Sep 17 00:00:00 2001 From: SaJH Date: Wed, 20 Aug 2025 22:54:46 +0900 Subject: Fixed #36399 -- Added support for multiple Cookie headers in HTTP/2 for ASGIRequest. Signed-off-by: SaJH --- django/core/handlers/asgi.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'django') diff --git a/django/core/handlers/asgi.py b/django/core/handlers/asgi.py index beace7597c..b4056ca042 100644 --- a/django/core/handlers/asgi.py +++ b/django/core/handlers/asgi.py @@ -94,7 +94,11 @@ class ASGIRequest(HttpRequest): # HTTP/2 say only ASCII chars are allowed in headers, but decode # latin1 just in case. value = value.decode("latin1") - if corrected_name in self.META: + if corrected_name == "HTTP_COOKIE": + value = value.rstrip("; ") + if "HTTP_COOKIE" in self.META: + value = self.META[corrected_name] + "; " + value + elif corrected_name in self.META: value = self.META[corrected_name] + "," + value self.META[corrected_name] = value # Pull out request encoding, if provided. -- cgit v1.3