464404 - cookies not sent when saving link target

Status: RESOLVED FIXED

(Core Graveyard :: File Handling, defect)

Description

[Mikel Ward]

Attachment: HTTP headers showing that Cookies are sent on viewing the page

After I have logged into a site, I try to download an image by clicking on its thumbnail, then clicking Save Link As....  Instead of getting the link target's content (in this case a GIF image), I get an HTML page telling me that I need to log in.

Using LiveHTTPHeaders shows that the GET request for the page view sends a bunch of cookies including a JSESSIONID, but the GET request to download the link target doesn't send any of my cookies.

Comment 1

[Mikel Ward]

Attachment: HTTP headers showing that Cookies are NOT sent on downloading a file

Comment 2

[till toenges]

Happens on OS X as well. Very annoying.

Comment 3

[[e-mail]]

do you have 'accept third party cookies' turned off?

Comment 4

[till toenges]

(In reply to comment #3)
> do you have 'accept third party cookies' turned off?

Makes no difference.

Comment 5

[till toenges]

(In reply to comment #4)
> Makes no difference.

Ok, that was wrong. It does make a difference. With accept third party cookies it sends the cookie.

Comment 6

[[e-mail]]

the 'save link as' code is a prime candidate for the new flag in bug 437174.

i'm guessing this belongs in core::file handling, but i could be wrong (bz?)

Comment 7

[Boris Zbarsky [:bzbarsky]]

This is going to need separate patching in all the various UIs around (though maybe the code is shared in toolkit...)

Comment 8

[nickers]

This bug breaks saving experimental addons from addons.mozilla.org when logged in (login page is saved instead).

Also, bug 469805 is a (better-titled) duplicate of this one.

Comment 9

[Michael Ryan]

This was fixed by bug 437174.