350516 - Live bookmarks do not pass persistent cookies when loading on startup

Status: RESOLVED INCOMPLETE

(Firefox :: Bookmarks & History, defect)

Description

[Shawn Neumann]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1

This situation applies to a persistent cookie for a domain from which an live bookmark has been created, like a "logged-in" identifier.  When Firefox restarts, and loads the live bookmark, the cookie on file is not passed with the request for the live bookmark.

As a result, on some systems, the cookie on file will then be overwritten with a new session cookie from the domain since it considers the live bookmark visit to be from an new rather than return visitor.

This could impact sites with "remember me on this computer" options along with RSS feeds.

Reproducible: Always

Steps to Reproduce:
I've tested this on an internal environment, however it should happen on any cookie based session with an live bookmark.

1. Log into site - receive cookie
2. Create RSS Live Bookmark - we now have 1 cookie for that domain
3. Restart firefox and check the cookie after loading of live bookmarks.
Actual Results:  
The cookie will be replaced with a new one from the session based site.

Expected Results:  
the cookie will be remain the same and will not overwrite the existing cookie on file.

Comment 1

[Steve England [:stevee]]

Reporter, do you still see this problem with the latest Firefox 2? If not, can you please close this bug as WORKSFORME. Thanks!

Comment 2

[Karl Pauls]

Here is a use case which may be used to test this issue. Unfortunately there is another issue preventing me from using live bookmark URLs with parameters (i.e. ?key=val&keyb=val)

Livejournal paid/permanent accounts can create a customview page to view their friends lists filtered to their preferences.

Step 1: on a paid/perm LJ account create a friends filter at http://www.livejournal.com/friends/editgroups.bml (example: http://karlthepagan.livejournal.com/friends/a - the filter name is "a")
Step 2: discover the number assigned to that filter by selecting it from the list present here http://www.livejournal.com/friends/filter.bml (example: http://karlthepagan.livejournal.com/friends?filter=32 - the filter number is "32")
Step 3: setup the friends S1 feed style to trusted, as documented here http://community.livejournal.com/howto/40882.html (example: http://karlthepagan.livejournal.com/data/customview?styleid=670763)
Step 4: add the filter number in a "filter" parameter to the feed URL (example: http://karlthepagan.livejournal.com/data/customview?styleid=670763&checkcookies=1&filter=32 - checkcookies is required to use the filter)
Step 5: add the feed URL as a live bookmark

Result: observe the friends feed live bookmark (not loaded / unfiltered / filtered) - current result is not loaded because of another issue
Expected: live bookmark should show the filtered friends feed

Comment 3

[Karl Pauls]

(issue with URL parameters mentioned above may be bug #314717)

Comment 4

[Aleksey Nogin]

Not sure if this is related, but may be another symptom of a more general "cookie storage initialized too late on startup" problem:

I have "ask me every time" for cookies, but I always set the "Use my choice for all cookies from this site". On "restore session" startups, FF 2.0.0.12 asks for cookie permissions for all sites, including those for each it already knows my preferences. After the session is restored, it works as expected.

Comment 5

[Marco Bonardo [:mak]]

resolving incomplete, it's not clear if this bug is still reproduceable in 3.5.x, it has been reported for 2.x.