44557 - Browser reads incorrect Cookie

Status: VERIFIED INVALID

(Core :: Networking: Cookies, defect, P3)

Description

[sarahs]

User opens one browser window and logs in as "Harry."
User opens second browser window and logs in as "Jane."
User begins to peruse web page as "Jane."  Goes to other browser window (logged 
in as "Harry")and hits the back button.  Information from "Jane" browser window 
is brought up instead of information from previous "Harry" page.  

This happens on other pages that use session variables as well.  Is there any 
known way to force the browser to read the correct cookie when two different 
accounts are accessed at the same time?

Comment 1

[Stephen P. Morse]

If I'm understanding this correctly, it sounds like a site problem rather than a 
browser problem.  Site is probably using a single cookie to store the username 
and therefore the site is not reentrant from the same machine (as you have 
observed).  It's analogous to using a global variable.

One way for the site to be reentrant in this manner would be for it to put the 
username into a query string in the url rather than into a cookie.  But I guess 
supporting multiple simultaneous users from a single machine is not a 
requirement of most sites so they simply use cookies instead.

I'd be curious to know if the behavior of seamonkey in this regard is any 
different from what 4.x does or what IE does.

Comment 2

[Blake Ross]

vrfy invalid