309595 - relative cookie paths don't seem to work from javascript

Status: RESOLVED INVALID

(Core :: Networking: Cookies, defect)

Description

[timeless]

http://www.howtocreate.co.uk/tutorials/index.php?tut=0&part=20

seems to indicate path=../ should work

notes: tested vendor branch of mozilla1.8 branch. i will confirm this bug if no 
one responds to it within some random time period.

Comment 1

[Wevah (Nate Weaver)]

I can't find anything from an even mildly authoritative source that suggests
that relative paths are allowed. AFAICT, document.cookie's path attribute is
absolute (i.e., a simple prefix operation). From JavaScript: the Definitive
Guide, 4th Ed., p. 267:

[...]For example, if a cookie set by
http://www.acme.com/catalog/widgets/index.html has its path set to "/catalog",
that cookie is also visible to http://www.acme.com/catalog/order.html. Or, if
the path is set to "/", the cookie is visible to any page on the www.acme.com
web server.

See also http://wp.netscape.com/newsref/std/cookie_spec.html which makes no
mention of relative paths.

Comment 2

[Michiel van Leeuwen (email: mvl+moz@)]

This bug is invalid, except if IE does allow relative paths.

Comment 3

[Boris Zbarsky [:bzbarsky]]

So what does IE do?

Comment 4

[Martijn Wargers (dead)]

I can't test with the url testcase, it gives js errors in IE6.
Instead I tested with this: javascript:document.cookie="test=case;path=../";alert(document.cookie)
This doesn't seem to work in IE6, afaict. No cookie is set.

Comment 5

[Boris Zbarsky [:bzbarsky]]

OK, so I'm going to claim this site is on crack.