1858370 - "Clear cookies and site data" from the address bar does not work

Status: VERIFIED FIXED

(Firefox for Android :: General, defect)

Description

[mrs_ophelia]

Steps to reproduce:

• Open a website and log into your account
• Tap the padlock icon in the address bar
• Tap "Clear cookies and site data" menu item
• Tap the Delete button in the dialog
• Reload the page

Actual results:

You are still logged in.

Expected results:

You should have been logged out.

This happens on all the websites I tried.

It is probably the same issue as in bug 1810374, but I had no permissions to comment on it.

It is not a duplicate of bug 1810311, as the latter is about redirection making it impossible to invoke the cookie deletion on the initial host name.
Your only option to clear the cookies for such websites is to clean everything from Settings.
This issue, OTOH, occurs even for websites that do no redirection, e.g. community.signalusers.org

My user agent is: Mozilla/5.0 (Android 13; Mobile; rv:109.0) Gecko/118.0 Firefox/118.0

Comment 1

[Adina Petridean QA [:apetridean]]

Hi, thanks for reporting. I was not able to reproduce the issue described issue on the latest Nightly 120.0a1 (from 16.10.2023) and Firefox 118.2.0 with Google Pixel 7 PRO (Android 14) and OnePlus A3000 (Android 6)

In order to further look into the issue you're experiencing, could you please provide the following additional information:

Details regarding the Device used and Android version;
Is this bug reproducible on the latest Nightly?

Thanks!

Comment 2

[mrs_ophelia]

(In reply to Adina Petridean from comment #1)

Details regarding the Device used and Android version;
Is this bug reproducible on the latest Nightly?

The device is Xiaomi Redmi Note 11 Pro, OTA-upgraded to MIUI Global 14.0.3 (Android 13 TP1A.220624.014).

The issue is reproducible with Firefox 118.2.0 and Firefox Nightly 120.0a1.

Comment 3

[Adina Petridean QA [:apetridean]]

Thank you, mrs_ophelia, for your prompt response. Could you please provide a video with this issue?

Comment 4

[mrs_ophelia]

Attachment: screen recording of the issue, in Nightly

Comment 5

[mrs_ophelia]

The video is with a fresh install of Nightly from Oct 23, no extensions, no changes to settings other than disabling the homepage stuff (so I can "bookmark" the website and record a shorter video, without unnecessary fiddling).

If you want, I can record a video showing the aforementioned details.

Comment 6

[Adina Petridean QA [:apetridean]]

I'm unable to reproduce this issue, but considering the provided video and details, I'm opening this issue as it seems to be specific to certain devices.

Comment 7

[Tom25519]

(In reply to Adina Petridean from comment #6)

I'm unable to reproduce this issue, but considering the provided video and details, I'm opening this issue as it seems to be specific to certain devices.

I can. On Fenix 120.1.1, I log in to addons.mozilla.org, then touch "Clear cookies and site data", then refresh the page, it is still log in. This bug not only happens on regular browsing mode, but also private browsing mode.

Comment 8

[Paul]

SUMO Forum question: https://support.mozilla.org/en-US/questions/1434145

Comment 9

[eclaudiu64]

I can reproduce this error too, on several phone models. Can a more detailed check be made on this problem?

Comment 10

[Adina Petridean QA [:apetridean]]

@Tom25519, thank you! I initially tried to reproduce this issue on Facebook, Instagram, and Twitter without success. However, after testing on addons.mozilla.org, I can confirm the issue on the latest Nightly 123.0a1 from December 22, 2023, using a Motorola G9 Plus (Android 11).

Comment 11

[jackyzy823]

STR:

Vist https://a.setcookie.net/ and set 5 cookies by "Submit Query" with options

1. Name 1_unspec , Cookie Domain: unspecified
2. Name 2_base , Cookie Domain: setcookie.net
3. Name 3_dotbase Cookie Domain: .setcookie.net
4. Name 4_sub Cookie Domain: a.setcookie.net
5. Name 5_dotsub Cookie Domain: .a.setcookie.net

(Other options keep default)

Then click "Icon" in the address bar , click "Clear Cookies and site data" , then click "DELETE".
Refresh the page to observe the remain cookies ( 1_unspec , 4_sub , 5_dotsub)

---

You can do further test under https://a.b.setcookie.net
Remaining cookies: ( 1_unspec , 4_b , 5_dot_b , 6_a_b , 7_dot_a_b )

---

It looks like only base domain's cookie is cleared.

Comment 12

[BMO Github Automation]

Attachment: [mozilla-mobile/firefox-android] Bug 1858370 - use clearDataFromBaseDomain for clearData (#4939)

Comment 13

[Jonathan Almeida [:jonalmeida]]

Thanks again jackyzy! The patch has been approved, but let's land it next week to avoid disruptions over the holiday weekend.

Updated the tracking flags so this doesn't get lost.

Comment 14

[BMO Github Automation]

Authored by https://github.com/jackyzy823
https://github.com/mozilla-mobile/firefox-android/commit/a1caf2310768eb898166f2f8cff96f20aecef9d0
[main] Bug 1858370 - use clearDataFromBaseDomain for clearData

Comment 15

[BugBot [:suhaib / :marco]]

The patch landed in nightly and beta is affected.
:jackyzy823, is this bug important enough to require an uplift?

• If yes, please nominate the patch for beta approval.
• If no, please set status-firefox122 to wontfix.

For more information, please visit BugBot documentation.

Comment 16

[Adina Petridean QA [:apetridean]]

Verified as fixed on the latest Nightly -123.0a1 from 17.01.2024 with Motorola G9 Plus (Android 11) and OnePlus A3000 (Android 6).

Comment 17

[Adina Petridean QA [:apetridean]]

Attachment: cookies.mp4