1676651 - Console warnings "Cookie has been rejected because it is already expired."

Status: RESOLVED FIXED

(Core :: Networking: Cookies, defect, P3)

Description

[iztok.kavkler]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0

Steps to reproduce:

Used standard XSRF token in Spring-Angular application. It deletes cookie XSRF-TOKEN and then re-creates it on every request.

Actual results:

The cookie was deleted and recreated, but for every request there was a warning "Cookie “XSRF-TOKEN” has been rejected because it is already expired." in the console.

Expected results:

There should be no warning since setting expiration time in the past is the standard way to delete cookies.

Comment 1

[Andrei Purice]

Setting a component for this issue in order to get the dev team involved.
If you feel it's an incorrect one please feel free to change it to a more appropriate one.

Comment 2

[Dragana Damjanovic [:dragana]]

baku, can you take a look?

Comment 3

[Tom S [:evilpie]]

I guess this message is confusing to people: https://stackoverflow.com/questions/65038173/cannot-remove-a-cookie-firefox-rejecting-cookies-from-the-past.

Comment 5

[chris.owtram]

This behavior occurs when passing a cookie value of null,false, or empty string.

Steps To Reproduce.
<?php
setcookie("test1", "");
?>

Comment 6

[Yves Goergen]

Looks like the logging code added here can simply be removed. If the HTTP spec says that expired cookies shall be deleted and no other browser informs about this normal operation, then why does Firefox pollute the console log here, and then even as a warning? I mean, the message is useless and not applicable when the intention was to delete a cookie. In other words, it's wrong, which is a bug worth fixing. And this one is really trivial.

(Please don't ask me to provide a patch. I already tried to set up a Firefox build environment and failed after many hours. I won't do that again for a 1-minute fix. Lots of people already have the required tools.)

Comment 7

[Robert Longson [:longsonr]]

Attachment: Bug 1676651 - don't warn to console if a cookie is deleted r=dveditz

Comment 8

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/f6e3407883b4
don't warn to console if a cookie is deleted r=dveditz

Comment 9

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/f6e3407883b4