Closed
Bug 1435978
Opened 7 years ago
Closed 7 years ago
New Tab Page - Top Sites - Incoherent Cookie Usage
Categories
(Firefox :: New Tab Page, defect)
Tracking
()
RESOLVED
INCOMPLETE
People
(Reporter: daniel.gasparotto, Unassigned, NeedInfo)
Details
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36
Steps to reproduce:
Add a new site to "Top Sites" on the New Tab Page.
Firefox will try to render a preview image of that site.
Actual results:
Firefox sends a GET request WITHOUT sending the existing cookies for that url.
The page gets loaded, javascript runs but it is capable of reading the existing cookies of that site.
This is incoherent!
The page then does an Ajax call to auto-relogin to that site using the cookie.
The site's response sets a session cookie and redirs Firefox to the home page.
Firefox follows that redir, but again DOESN'T SEND COOKIES.
Therefore, Firefox is redirected back to the login page. The javascript reads the existing cookie again, auto-logins again etc. in an *INFINITE LOOP* (and Firefox never stops trying). Resulting in thousands of new sessions being opened in loop.
Expected results:
I see two options here:
- Either Firefox sends existing cookies when rendering the preview;
- Or Firefox DOESN'T send cookies BUT ALSO doesn't allow javascript code to access those cookies that weren't sent.
Updated•7 years ago
|
Component: Untriaged → New Tab Page
Comment 1•7 years ago
|
||
Could you give me the URL of the site that causes this behaviour?
Flags: needinfo?(daniel.gasparotto)
Updated•7 years ago
|
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → INCOMPLETE
Assignee | ||
Updated•5 years ago
|
Component: Activity Streams: Newtab → New Tab Page
You need to log in
before you can comment on or make changes to this bug.
Description
•