40946 - Block site from seting cookies doesn't work on site

Status: VERIFIED INVALID

(Core :: Networking: Cookies, defect, P3)

Description

[jmmrb]

Go to www.quios.com:
set "Block site from seting cookies"
leave moz
go to moz
erase all your cookies to www.quios.com / quios.com
Go to  www.quios.com
and you got cookies again

Build id 2000052320 NT4/2000

Comment 1

[Stephen P. Morse]

There is no problem here, feature is working as intended.  If any cookies 
requests were made for host www.quios.com, they would be rejected.  Problem here 
is that www.quios.com is not setting a host cookie but rather is setting a 
domain cookie, valid for all hosts in the domain .quios.com.  The feature as 
implemented does not attempt to block domain cookies.

So you might be inclined to request that when the "Block site for setting 
cookies" is clicked on, we should also block the setting of cookies for all 
domains in which this site is a member".  In other words, block any domain 
cookies for .quios.com and also .com.  But that an enhancement request and not a 
bug.

However, I'm glad you filed this report because you made me realize that there 
is a but in the cookie viewer.  Namely, the captions on the cookie properties is 
always saying "host" on the third line.  It is supposed to change between "host" 
and "domain", depending on the type of cookie.  I'll investigate to find out why 
that is broken (it's a regression -- it used to work.  I just filed bug 40978 on 
this problem.

Comment 2

[Keyser Sose]

Mozilla is handling this correctly. Marking as verified.