330277 - Cookies set from other domains when preference set for requested domain only.

Status: RESOLVED DUPLICATE of bug 200716

(Core :: Networking: Cookies, defect)

Description

[David E. Ross]

User-Agent:       Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0 Mnenhy/0.7.3.0
Build Identifier: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0 Mnenhy/0.7.3.0

My cookie preferences are:
Cookie Acceptance Policy: Allow cookies for the originating website only
Cookie Retention Policy:  Accept cookies normally

My Cookie Manager has several domains listed as "site cannot set cookies" and none as "site can set cookies".  

If I go to the Los Angeles Times Web site (indicated URL) and select a particular news story, cookies from domains other than www.latimes.com are being set.  

Reproducible: Always

Steps to Reproduce:
1.  Use Cookie Manager to remove all unwanted cookies, including those from tacoda.net and sageanalyst.net.  
2.  Set preferences for cookies as I indicated in "Details" above.  
3.  Go to the Times Web site.  
4.  Select a news story.  
5.  View cookies via Cookie Manager

Actual Results:  
Cookies exist for domains tacoda.net and sageanalyst.net.  

NOTE:  As news stories and advertisers change on the Times Web site, the domains setting cookies might also change.  

Expected Results:  
No cookies should exist for domains tacoda.net and sageanalyst.net.

Since the preferences for cookie acceptance fall under "Privacy & Security", this is a serious error.

Comment 1

[David E. Ross]

I have my cookie.txt file locked (read-only).  However, I just made a test with it unlocked (read-write).  The problem described in this bug report was still demonstrated.  Thus, this bug is not an artifact of bug #257288.  

Comment 2

[Mike Connor [:mconnor]]

This is a pretty commonly reported "issue" that may or may not be unfixable, depending on your perspective.  The original is fairly old.

Comment 3

[David E. Ross]

I concede this is a duplicate of bug #200716.  The LA Times is using JavaScript to access the sources of the third-party cookies.  

*** This bug has been marked as a duplicate of 200716 ***