295987 - Cookie is not deleted immediately when expiration is set to -1

Status: RESOLVED INVALID

(Core :: Networking: Cookies, defect)

Description

[Steve V]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; nl-NL; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; nl-NL; rv:1.7.8) Gecko/20050511 Firefox/1.0.4

When a client-side javascript sets a cookie with the expiration data to "-1" the
cookie will only be deleted when Firefox is closed.
Even when the privacy option is set to save cookies untill they expire.

Reproducible: Always

Steps to Reproduce:
1. Set the expiration of a cookie to "-1"

Actual Results:  
The cookie manager shows:
Expiration: End of this session

Expected Results:  
Immediate removal of the cookie

Comment 1

[Michiel van Leeuwen (email: mvl+moz@)]

How do you know it is not expired? By checking the manager, or did you actually
verify that it is not send over the network anymore?

Comment 2

[Steve V]

(In reply to comment #1)
> How do you know it is not expired? By checking the manager, or did you actually
> verify that it is not send over the network anymore?

By checking the manager, nothing is sent over the network as the cookie is set
and  'removed' by client-side javascript.

Comment 3

[Steve V]

Attachment: Bug repro

Instructions are in the attachment.

Comment 4

[Michiel van Leeuwen (email: mvl+moz@)]

actually, expires=-1 is not valid. expires= expects a date, not an integer.

Comment 5

[Steve V]

I looked it up in the standards specifications and you are right. But when I
look around on the web I see lots of scripts using "expires=-1" to expire a
cookie immediately.

I'll resolve this bug as invalid.