svn commit: r1933534 - httpd/httpd/trunk/docs/manual/mod

[rb...@apache.org]

Author: rbowen
Date: Wed Apr 29 19:50:05 2026
New Revision: 1933534

Log:
mod_headers: Note that Set-Cookie is an exception to comma-separated append per RFC 6265 (Bug 62213)

Modified:
   httpd/httpd/trunk/docs/manual/mod/mod_headers.xml

Modified: httpd/httpd/trunk/docs/manual/mod/mod_headers.xml
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_headers.xml	Wed Apr 29 19:38:44 2026	(r1933533)
+++ httpd/httpd/trunk/docs/manual/mod/mod_headers.xml	Wed Apr 29 19:50:05 2026	(r1933534)
@@ -358,6 +358,10 @@ available in 2.4.10 and later</compatibi
     the same name. When a new value is merged onto an existing
     header it is separated from the existing header with a comma.
     This is the HTTP standard way of giving a header multiple values.
+    Note that the <code>Set-Cookie</code> header is an exception:
+    <rfc>6265</rfc> requires multiple <code>Set-Cookie</code> headers
+    rather than combining values with commas. Use <code>add</code>
+    instead of <code>append</code> for <code>Set-Cookie</code>.
     <br/><br/><p>Choosing a <var>condition</var>: If the existing header to be appended to was added by this module, you must match the condition
     parameter that was originally used. Otherwise, you must determine by trial
     and error whether <code>always</code> should be specified because you can't