Issue #26302: merge from 3.5

diff --cc Misc/NEWS
index 546c295ef37e50c7bf1869b43653495494b78401,a0ccaef865556180996ccf0f4b9f45406767ce5d..3e2b113a87190e4f1f79798c82047a1bb4ae9168
--- 1/Misc/NEWS
--- 2/Misc/NEWS
+++ b/Misc/NEWS
@@@ -10,15 -10,9 +10,18 @@@ Release date: tb
  Core and Builtins
  -----------------
  
+ - Issue #26302: Correct behavior to reject comma as a legal character for
+   cookie names.
+ 
 +- Issue #26136: Upgrade the warning when a generator raises StopIteration
 +  from PendingDeprecationWarning to DeprecationWarning.  Patch by Anish
 +  Shah.
 +
 +- Issue #26204: The compiler now ignores all constant statements: bytes, str,
 +  int, float, complex, name constants (None, False, True), Ellipsis
 +  and ast.Constant; not only str and int. For example, ``1.0`` is now ignored
 +  in ``def f(): 1.0``.
 +
  - Issue #4806: Avoid masking the original TypeError exception when using star
    (*) unpacking in function calls.  Based on patch by Hagen Fürstenau and
    Daniel Urban.