Closed Bug 1560778 Opened 7 years ago Closed 6 years ago

Cookie management doesn't work as expected

Categories

(Core :: Networking: Cookies, defect, P3)

Product:
Core
Component:
Networking: Cookies
Version:
67 Branch
Type:
defect

Tracking

()

Status:
RESOLVED INVALID
Tracking Flags:
Tracking Status
firefox67 --- affected
firefox68 --- affected
firefox69 --- affected
firefox70 --- affected

People

(Reporter: 2761c4f2, Unassigned)

References

Details

(Whiteboard: [necko-triaged])

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:67.0) Gecko/20100101 Firefox/67.0

Steps to reproduce:

  1. Open web page e.g. xxx.com

2)Gives you cookies like

xxx.com
www.xxx.com
nimg.xxx.com

  1. Delete www.xxx.com, nimg.xxx.com BUT not xxx.com

  2. Immediately logs you out of xxx.com

Actual results:

You'r not any longer logged-in.

Expected results:

Older versions of FF (2 month ago or older), you where still logged-in.
Tried this "bug" with pages as Google, Amazon and others
Older FF versions did not have that kind of behaviour. Other browsers like Chrome, Safari still do not have this issue!

Build ID 20190619235627
User Agent Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:67.0) Gecko/20100101 Firefox/67.0

I've managed to reproduce this issue on the latest release version (v67.0.4) and also on the latest Nightly build (v69.0a1).

Status: UNCONFIRMED → NEW
status-firefox67: --- → affected
status-firefox68: --- → affected
status-firefox69: --- → affected
Component: Untriaged → Networking: Cookies
Ever confirmed: true
Product: Firefox → Core
  1. Delete www.xxx.com, nimg.xxx.com BUT not xxx.com

How do you delete individual cookies? Via devtools?
Maybe somebody from the webcompact or devtools teams should take a look.

Flags: needinfo?(george.craciun)
Flags: needinfo?(2761c4f2)

classic way ==> Browser Settings, choose individually and delete one by one

Flags: needinfo?(2761c4f2)

I did the same on my side.

Flags: needinfo?(george.craciun)

The priority flag is not set for this bug.
:mayhemer, could you have a look please?

For more information, please visit auto_nag documentation.

Flags: needinfo?(honzab.moz)

(In reply to Cristian Craciun from comment #5)

I did the same on my side.

I'll ask for exact steps to repro (site urls + how to log-in) and expected/actual behavior for them. Thanks.

Flags: needinfo?(honzab.moz) → needinfo?(george.craciun)

Build ID 20190728214940
User Agent Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:70.0) Gecko/20100101 Firefox/70.0

Steps To Reproduce:

  1. Launch Firefox with a new profile.
  2. Go to https://www.google.com/ and login with a valid account.
  3. Go to Settings - Privacy & Security - Cookies and Site Data - Manage Data...
  4. Delete all the cookies except google.com
  5. Go back to https://www.google.com/ tab.

Expected result:
The account is still logged in.

Actual result:
The account is logged out.

Note: On https://www.amazon.com/ I didn't managed to reproduce this issue. After deleting all cookies except amazon.com the account is still logged in.

status-firefox70: --- → affected
Flags: needinfo?(george.craciun)

FWIW I can't reproduce in Mac Nightly

Priority: -- → P3
Whiteboard: [necko-triaged]

This bug is invalid. Many websites use a 3rd party domain as SSO. For instance, google has accounts.google.com.
Deleting all the cookies except 'google.com', is not enough to maintain the user logged in.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.