Commit cb491daca35 for php
commit cb491daca35fe8e0177d60b4e163218c4ec97b2a
Author: Jorg Adam Sowa <jorg.sowa@gmail.com>
Date: Wed Oct 14 17:24:50 2026 +0200
ext/session: remove test made unreachable by cookie attribute validation (#24325)
session_start_cookie_header_rejected.phpt injected a newline through
session.cookie_path to make the SAPI reject the Set-Cookie header.
Since b9a0228bd84 session.cookie_path and session.cookie_domain reject
CR/LF up front, so no userland input can reach that branch any more
and the test failed.
diff --git a/ext/session/tests/session_start_cookie_header_rejected.phpt b/ext/session/tests/session_start_cookie_header_rejected.phpt
deleted file mode 100644
index 6c3e3b78a3b..00000000000
--- a/ext/session/tests/session_start_cookie_header_rejected.phpt
+++ /dev/null
@@ -1,28 +0,0 @@
---TEST--
-session_start() when the SAPI rejects the session cookie header
---INI--
-session.save_handler=files
-session.name=PHPSESSID
-session.gc_probability=0
---EXTENSIONS--
-session
---FILE--
-<?php
-
-ob_start();
-
-set_error_handler(function (int $errno, string $errstr): bool {
- echo "handler: ", $errstr, PHP_EOL;
- return true;
-});
-
-session_set_cookie_params(['path' => "/\r\nX-Injected: yes"]);
-
-var_dump(session_start());
-var_dump(session_status() === PHP_SESSION_NONE);
-
-?>
---EXPECT--
-handler: Header may not contain more than a single header, new line detected
-bool(false)
-bool(true)