218056 - cookies are sent although "disable cookies" is set in preferences

Status: RESOLVED INVALID

(Core :: Networking: Cookies, defect)

Description

[Elmar Ludwig]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5b) Gecko/20030827
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5b) Gecko/20030827

Stored cookies are sent to a web site although the setting "disable cookies" is
selected in the prefs dialog (Privacy & Security -> Cookies).

This used to work correctly in 1.4 IIRC.

Reproducible: Always

Steps to Reproduce:
1. Select "Enable all cookies" or "Enable cookies for the originating web site
only" in preferences
2. Log in to Bugzilla
3. Select "Disable cookies" in preferences
4. Reload any bugzilla page
Actual Results:  
You will see that you are still logged in (look at the bottom of the page), i.e.
the login cookie has been sent.

Expected Results:  
If cookies are disable, no cookie information should be sent to the server.

Comment 1

[[e-mail]]

well, do you have any sites in the whitelist (Tools->Cookie Manager->Manage
Stored Cookies->Cookie Sites)?

Comment 2

[Elmar Ludwig]

Indeed I have, and this seems to be the cause of the behaviour I see.

Are you saying that "Disable cookies" does not actually disable cookies any
more, and that we have support for a cookie white list now? Bug 184059 seems to
indicate this.

Ok, then that's actually a feature, not a bug... ;-), though a option for
completely disabling cookies might still be useful.

But I would really recommend to update the prefs UI (and help) for 1.5 final, as
this semantic change will definitely be confusing for some people (including me). 

Comment 3

[[e-mail]]

that's correct.

and yeah, it would be a good idea to evaluate the help text we have for cookies. ;)

Comment 4

[Daniel Wang]

Keller, we should add this to Help

Comment 5

[[e-mail]]

if you guys want to add stuff to help, feel free to catch me on #mozilla or
something, and i can summarize the features/changes we might want to make to the
help text...

Comment 6

[[e-mail]]

(this bug is invalid)