Open Bug 1095273 Opened 10 years ago Updated 2 years ago

Duplicate HTTP headers are concatenated in network view

Categories

(DevTools :: Netmonitor, defect)

33 Branch
x86_64
Linux
defect

Tracking

(Not tracked)

UNCONFIRMED

People

(Reporter: anthonyryan1, Unassigned)

References

(Blocks 1 open bug)

Details

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:33.0) Gecko/20100101 Firefox/33.0
Build ID: 20141014182055

Steps to reproduce:

1. Use the developer tools to inspect the Set-Cookie values returned to the browser on a POST request.
2. Observed a malformed (and misleading) Set-Cookie header.


Actual results:

The developer tools indicated that Firefox was receiving:

Set-Cookie: "kl=1; expires=Sat, 07-Nov-2015 03:14:17 GMT; Max-Age=31536000; path=/login; domain=.whatbox.ca; httponlysessionid=test; expires=Sat, 07-Nov-2015 03:14:17 GMT; Max-Age=31536000; path=/; secure; httponly"


Expected results:

Multiple Set-Cookie headers should have been shown in the developer tools:

Set-Cookie: "kl=1; expires=Sat, 07-Nov-2015 03:14:17 GMT; Max-Age=31536000; path=/login; domain=.whatbox.ca; httponly"
Set-Cookie: "sessionid=test; expires=Sat, 07-Nov-2015 03:14:17 GMT; Max-Age=31536000; path=/; secure; httponly"
Component: Untriaged → Developer Tools: Netmonitor
I can confirm this bug still exists with Firefox 57, currently on Nightly channel, Windows 64-bit.
All Set-Cookie headers are merged together, whether in the main view or in "Raw headers" (both on the Headers tab).
Product: Firefox → DevTools
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.