690727 - Don't allow specific domain's cookies to be used when on other web sites

Status: UNCONFIRMED

(Firefox :: Security, defect)

Description

[Ilhan Yumer]

User Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Build ID: 20110928134238

Steps to reproduce:

I've visited a web site that has Facebook Like box in it while I was logged in/out to Facebook.


Actual results:

Facebook recorded that I have visited that web site.


Expected results:

Facebook should not be able to set cookies and similar things (storage) to Firefox when I'm on that web site.

Please provide a black list option for such acts. I don't want to be tracked. Might be edited from about:permissions.

Comment 1

[u279076]

Does/should DO-NOT-TRACK extend to this sort of activity? I think so, at least opt-in to blocking such activity.

Comment 2

[Toover]

I think you can prevent this now that there is a setting to refuse third-party cookies.
It means you cannot get Facebook cookies while visiting another website.