1472620 - Pinned tabs keep session cookies of other tabs

Status: RESOLVED DUPLICATE of bug 530594

(Firefox :: Untriaged, defect)

Description

[Konstantin Shahmurov]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:61.0) Gecko/20100101 Firefox/61.0
Build ID: 20180621125625

Steps to reproduce:

1. Pin one or more tabs.
2. Open a new (not pinned) tab.
3. Open some site that has a login form in the non-pinned tab.
4. Log in on this site while not checking the "remember me" checkbox. The site store a session cookie, which should be deleted when I close the browser. Check that the cookie is a session cookie in the developer tools panel.
5. Close Firefox. The cookie should be deleted.
6. Reopen Firefox.
7. Open the site from the step 3.


Actual results:

When I open the site again, I see that I am logged in. The session cookie is not deleted.


Expected results:

The session cookie of unpinned site have to be deleted when we close Firefox. Otherwise it brakes security, since when user does not check the "remember me" option he expect the Firefox will log him out upon closing the browser.

Comment 1

[laszlo.bialis]

Hi!

I've managed to reproduce the issue above on Win7 x32 latest Release v.61.0 Build ID: 20180621125625. 

Although you've mentioned that the issue could be related to the pinned tabs, it seems that actually it's related more to the cookies lifespan. The issue is present on Chrome browser also, you can find out more about the subject on Bug 530594, as such marking as duplicate.