1335837 - Network monitor can hide more than one Set-Cookie response header

Status: NEW

(DevTools :: Netmonitor, defect, P2)

Description

[(no longer active)]

STR: Go to https://www.messe.de/ and look at the first set of response headers.

curl produces:
Server: nginx
Date: Wed, 01 Feb 2017 18:04:25 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: JSESSIONID=88262DB8A9B30348E71F828970842248; Path=/; Secure; HttpOnly
Location: http://www.messe.de/
Set-Cookie: SRV=b08|WJIjL; path=/

Firefox shows (both in the UI and in Raw Headers view):
Server: nginx
Date: Wed, 01 Feb 2017 18:05:21 GMT
Content-Length: 0
Connection: keep-alive
Location: http://www.messe.de/
Set-Cookie: SRV=b15|WJIjZ; path=/

Comment 1

[(no longer active)]

The cookies view seems to show the actual response cookies that were set.

Comment 2

[Jan Honza Odvarko [:Honza] (always need-info? me)]

Attachment: cookies.png

What version of Firefox do you use?

When testing on the latest Nightly, I am seeing:

Set-Cookie: JSESSIONID=5B95B0A8C98AD66FFF6B09B5A17A670B; Path=/; HttpOnlySRV=b07|WJIwg; path=/

See also the screenshot.

Honza

Comment 3

[(no longer active)]

(In reply to Jan Honza Odvarko [:Honza] from comment #2)
> Created attachment 8832575 [details]
> cookies.png
> 
> What version of Firefox do you use?

Latest Nightly.

> When testing on the latest Nightly, I am seeing:
> 
> Set-Cookie: JSESSIONID=5B95B0A8C98AD66FFF6B09B5A17A670B; Path=/;
> HttpOnlySRV=b07|WJIwg; path=/
> 
> See also the screenshot.

You're looking at the wrong request.  See the *first* request (the one for the link in comment 0, not its redirects.)  See the screenshots I'll attach in a sec.

Comment 4

[(no longer active)]

Attachment: Headers view

Comment 5

[(no longer active)]

Attachment: Cookies view

Comment 6

[(no longer active)]

I'm not sure how the Headers view picks which Set-Cookie header to show.  You'll note that what appears in the screenshot is different to what I had seen in comment 0.

Comment 7

[(no longer active)]

I think this is most likely a dupe of bug 1273503.