Fix bug with whitespace trimming of cookie elements

    The whitespace behavior is now identical to CGI::Simple::Cookie, and
    has an automated test.

Changes

@@ -20,6 +20,9 @@
   - CGI::Cookie->new() now follows the documentation and returns undef 
     if the -name and -value args aren't provided. This new behavior is also
     consistent with the docs and code of CGI::Simple::Cookie. (Mark Stosberg)
+  - CGI::Cookie->parse() now trims leading and trailing whitespace from cookie  
+    elements as intended. The change also makes this part of the parsing 
+    identical to CGI::Simple::Cookie (Mark Stosberg) 
 
   [SECURITY]
   - Further improvements have been made to guard against newline injections

lib/CGI/Cookie.pm

@@ -90,7 +90,9 @@ sub parse {
 
   my @pairs = split("[;,] ?",$raw_cookie);
   for (@pairs) {
-    s/\s*(.*?)\s*/$1/;
+    s/^\s+//;
+    s/\s+$//;
+
     my($key,$value) = split("=",$_,2);
 
     # Some foreign cookies are not in name=value format, so ignore

t/cookie.t

@@ -18,7 +18,8 @@ use CGI::Cookie;
 #-----------------------------------------------------------------------------
 
 my @test_cookie = (
-           'foo=123; bar=qwerty; baz=wibble; qux=a1',
+           # including leading and trailing whitespace in first cookie
+           ' foo=123 ; bar=qwerty; baz=wibble; qux=a1',
            'foo=123; bar=qwerty; baz=wibble;',
            'foo=vixen; bar=cow; baz=bitch; qux=politician',
            'foo=a%20phrase; bar=yes%2C%20a%20phrase; baz=%5Ewibble; qux=%27',