Closed Bug 330277 Opened 18 years ago Closed 18 years ago

Cookies set from other domains when preference set for requested domain only.

Categories

(Core :: Networking: Cookies, defect)

x86
Windows 98
defect
Not set
major

Tracking

()

RESOLVED DUPLICATE of bug 200716

People

(Reporter: david, Unassigned)

References

()

Details

User-Agent:       Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0 Mnenhy/0.7.3.0
Build Identifier: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0 Mnenhy/0.7.3.0

My cookie preferences are:
Cookie Acceptance Policy: Allow cookies for the originating website only
Cookie Retention Policy:  Accept cookies normally

My Cookie Manager has several domains listed as "site cannot set cookies" and none as "site can set cookies".  

If I go to the Los Angeles Times Web site (indicated URL) and select a particular news story, cookies from domains other than www.latimes.com are being set.  

Reproducible: Always

Steps to Reproduce:
1.  Use Cookie Manager to remove all unwanted cookies, including those from tacoda.net and sageanalyst.net.  
2.  Set preferences for cookies as I indicated in "Details" above.  
3.  Go to the Times Web site.  
4.  Select a news story.  
5.  View cookies via Cookie Manager

Actual Results:  
Cookies exist for domains tacoda.net and sageanalyst.net.  

NOTE:  As news stories and advertisers change on the Times Web site, the domains setting cookies might also change.  

Expected Results:  
No cookies should exist for domains tacoda.net and sageanalyst.net.

Since the preferences for cookie acceptance fall under "Privacy & Security", this is a serious error.
I have my cookie.txt file locked (read-only).  However, I just made a test with it unlocked (read-write).  The problem described in this bug report was still demonstrated.  Thus, this bug is not an artifact of bug #257288.  
This is a pretty commonly reported "issue" that may or may not be unfixable, depending on your perspective.  The original is fairly old.
Whiteboard: DUPEME
I concede this is a duplicate of bug #200716.  The LA Times is using JavaScript to access the sources of the third-party cookies.  

*** This bug has been marked as a duplicate of 200716 ***
Status: NEW → RESOLVED
Closed: 18 years ago
Resolution: --- → DUPLICATE
Whiteboard: DUPEME
You need to log in before you can comment on or make changes to this bug.