Closed Bug 1950565 Opened 14 days ago Closed

CookieStore must enforce the maximum name/value pair size correctly

Categories

(Core :: Networking: Cookies, defect)

defect

Tracking

()

RESOLVED FIXED
137 Branch
Tracking Status
firefox-esr115 --- unaffected
firefox-esr128 --- unaffected
firefox136 + fixed
firefox137 + fixed

People

(Reporter: baku, Assigned: baku)

References

Details

(Keywords: webcompat:platform-bug)

Attachments

(1 file)

"The combined lengths of the name and value fields must not be greater than 4096 bytes (the maximum name/value pair size)."

Summary: CookieStore must implement the maximum name/value pair size correctly → CookieStore must enforce the maximum name/value pair size correctly
Pushed by amarchesini@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/7c97bdd81621 CookieStore must enforce the maximum name/value pair size correctly, r=edgul,smaug
Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/50972 for changes under testing/web-platform/tests
Status: NEW → RESOLVED
Closed: 13 days ago
Resolution: --- → FIXED
Target Milestone: --- → 137 Branch
Upstream PR merged by moz-wptsync-bot
Duplicate of this bug: 1951888

Comment on attachment 9468569 [details]
Bug 1950565 - CookieStore must enforce the maximum name/value pair size correctly, r?edgul

Beta/Release Uplift Approval Request

  • User impact if declined/Reason for urgency: Websites that use CookieStore cookies with name+value lengths > 1024 will fail. This could cause login and other state-related issues.
  • Is this code covered by automated tests?: Yes
  • Has the fix been verified in Nightly?: Yes
  • Needs manual test from QE?: No
  • If yes, steps to reproduce:
  • List of other uplifts needed: None
  • Risk to taking this patch: Low
  • Why is the change risky/not risky? (and alternatives if risky): Not risky.
    It seems to be fine in nightly and beta.
    No logic is changed, just changed the acceptance limits of cookies being set.
    Also a test was added
  • String changes made/needed:
  • Is Android affected?: Yes
Attachment #9468569 - Flags: approval-mozilla-release?

Comment on attachment 9468569 [details]
Bug 1950565 - CookieStore must enforce the maximum name/value pair size correctly, r?edgul

Approved for 136.0.1

Attachment #9468569 - Flags: approval-mozilla-release? → approval-mozilla-release+
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: