Closed
Bug 1903415
Opened 2 years ago
Closed 2 years ago
Long cookie attrbiutes should be rejected
Categories
(Core :: Networking: Cookies, defect, P2)
Core
Networking: Cookies
Tracking
()
RESOLVED
FIXED
129 Branch
| Tracking | Status | |
|---|---|---|
| firefox129 | --- | fixed |
People
(Reporter: edgul, Assigned: baku)
References
(Blocks 1 open bug)
Details
(Whiteboard: [necko-triaged])
Attachments
(1 file)
WPT cookies/size/attributes.www.sub.html has rejection tests for attributes that are too long:
- path
- domain
- Max-age
We should probably solve each in their own patch.
|
Assignee | |
Comment 1•2 years ago
|
||
|
||
Updated•2 years ago
|
Assignee: nobody → amarchesini
Status: NEW → ASSIGNED
I'm wondering about potential web-compat issues here. Chrome has this implemented already, while safari is still failing at least some of them: https://wpt.fyi/results/cookies/size/attributes.www.sub.html?label=experimental&label=master&aligned
Does anyone think we need to be concerned?
Pushed by amarchesini@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/d3f86471ab48
Long cookie attributes (path, domain, max-age) should be rejected, r=timhuang
|
||
Comment 4•2 years ago
|
||
| bugherder | ||
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
status-firefox129:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 129 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•