Closed Bug 1435978 Opened 7 years ago Closed 7 years ago

New Tab Page - Top Sites - Incoherent Cookie Usage

Categories

(Firefox :: New Tab Page, defect)

58 Branch
defect
Not set
normal

Tracking

()

RESOLVED INCOMPLETE

People

(Reporter: daniel.gasparotto, Unassigned, NeedInfo)

Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Steps to reproduce: Add a new site to "Top Sites" on the New Tab Page. Firefox will try to render a preview image of that site. Actual results: Firefox sends a GET request WITHOUT sending the existing cookies for that url. The page gets loaded, javascript runs but it is capable of reading the existing cookies of that site. This is incoherent! The page then does an Ajax call to auto-relogin to that site using the cookie. The site's response sets a session cookie and redirs Firefox to the home page. Firefox follows that redir, but again DOESN'T SEND COOKIES. Therefore, Firefox is redirected back to the login page. The javascript reads the existing cookie again, auto-logins again etc. in an *INFINITE LOOP* (and Firefox never stops trying). Resulting in thousands of new sessions being opened in loop. Expected results: I see two options here: - Either Firefox sends existing cookies when rendering the preview; - Or Firefox DOESN'T send cookies BUT ALSO doesn't allow javascript code to access those cookies that weren't sent.
Component: Untriaged → New Tab Page
Component: New Tab Page → Activity Streams: Newtab
Could you give me the URL of the site that causes this behaviour?
Flags: needinfo?(daniel.gasparotto)
Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Resolution: --- → INCOMPLETE
Component: Activity Streams: Newtab → New Tab Page
You need to log in before you can comment on or make changes to this bug.