Closed Bug 1256209 Opened 10 years ago Closed 7 years ago

Cookie whitelist is ignored / Deleting cookies at end of session sets all whitelisted cookies to expire at end of session

Categories

(Core :: Networking: Cookies, defect, P3)

Product:
Core
Component:
Networking: Cookies
Version:
45 Branch
Type:
defect

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: ferrocenecloud, Unassigned)

Details

(Whiteboard: [necko-backlog])

User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 Build ID: 20160303134406 Steps to reproduce: Configure a cookie exceptions list in the privacy settings menu, and set cookies to be deleted at the end of the session. While cookie exceptions being deleted has been an on/off bug for years, it seems to have reappeared in the 45 branch, along with a bug causing Firefox to not respect cookie exceptions. Actual results: 1) In privacy settings, site exceptions list entries seem to be randomly deleted by Firefox. 2) Even when these entries are not deleted, Firefox is ignoring the whitelist and setting all cookies to expire at the end of the session Expected results: Firefox should not delete entries from the whitelist without user authorisation. For whitelisted sites, cookies should be set to expire appropriately and not at the end of the session; login sessions etc. should be maintained for whitelisted sites.
Component: Untriaged → Networking: Cookies
Product: Firefox → Core
Whiteboard: [necko-backlog]
Is it a recent regression?
It appears to be, though I've been able to replicate it in the past few major versions so it may have been around longer than I thought. There is a workaround to avoid this bug: set cookies to be kept until they expire, and log in to desired sites. Restart Firefox and set cookies to be deleted when Firefox is closed. Existing cookies are not re-evaluated according to the whitelist nor is their expire time modified.
Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258
Priority: -- → P1
Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258
Priority: P1 → P3

This bug is invalid. We have tests for sanitizer.jsm and for ClearDataServices. Cookie permissions are correctly supported.

Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.