kennethreitz/requests — pull request #620 by mwielgoszewski (2012-05-17 17:53:47+00:00)
Title: Do not send cookies marked with secure flag over insecure HTTP connection

By default, the cookielib.CookieJar used by requests does not honor standard accept/reject rules for Netscape and RFC295 cookies. This behavior could result in the inadvertent exposure of sensitive cookies that have been set with the 'secure' flag (i.e., they are only to be sent to HTTPS resources) when requesting non-HTTPS connection.