No error message for secure cookie denying overwriting by nonsecure cookie
Categories
(Core :: Networking: Cookies, defect, P3)
Tracking
()
People
(Reporter: jab_creations, Unassigned)
References
Details
(Keywords: good-first-bug, Whiteboard: [necko-triaged])
Attachments
(1 file)
|
135.80 KB,
image/png
|
Details |
Screenshot 2024-06-22 at 09.44.57.png
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0 Waterfox/56.3
Steps to reproduce:
I filed bug 1617361 (https://bugzilla.mozilla.org/show_bug.cgi?id=1617361) and it was discovered that the error message "W/cookie rejected because cookie can't save because older cookie is secure cookie but newer cookie is non-secure cookie" is NOT displayed in the normal developer console at any point.
That bug apparently occurs when a nonsecure cookie attempts to override a secure cookie.
Actual results:
No error message is displayed and the developer only notices the bug if it afflicts behavior enough.
Expected results:
The developer console should issue an explicit error message.
In fact any errors happening in the advanced networking log (about:networking#logging) should ALWAYS be explicitly sent to the normal developer console (properly classified: errors to errors, warnings to warnings).
|
||
Comment 1•6 years ago
|
||
Bugbug thinks this bug should belong to this component, but please revert this change in case of error.
|
||
Updated•6 years ago
|
|
||
Comment 2•6 years ago
|
||
Because this bug's Severity has not been changed from the default since it was filed, and it's Priority is P3 (Backlog,) indicating it has been triaged, the bug's Severity is being updated to S3 (normal.)
|
||
Comment 4•2 years ago
|
||
From what I can see, the issue may be resolved. Firefox 127.0 shows the appropriate message if a non-secure connection tries to override a cookie with Secure flag (see attachment):
Cookie “id” has been rejected because there is an existing “secure” cookie.
|
||
Comment 5•1 year ago
|
||
This issue is resolved. See these:
- https://searchfox.org/mozilla-central/rev/7279a1df13a819be254fd4649e07c4ff93e4bd45/netwerk/cookie/CookieParser.cpp#137-141 - this is where the message id dispatched
- https://searchfox.org/mozilla-central/rev/7279a1df13a819be254fd4649e07c4ff93e4bd45/netwerk/cookie/CookieStorage.cpp#610-631 - this is implementation lives.
Description
•