842718 - www and cookies

Status: RESOLVED INVALID

(Firefox :: Untriaged, defect)

Description

[tsunamy_boy]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0
Build ID: 20130201065344

Steps to reproduce:

This 2 pages:
http://example.com
http://www.example.com

Are exactly the same, but the browser is interpreting them as different, so ... the cookies that had been applied to the domain without the "www" are not going to be send to the server for the domain with the "www".

What does this means?
If i have a session on http://www.example.com/admin i'm not able to open it on http://example.com/admin because of the cookies.

I don't know if this is a bug or if this is for security reasons.

Comment 1

[Matthias Versen [:Matti]]

www.example.com is of course not the same as example.com.
www.example.com is a subdomain of example.com and abc.example.com is another subdomain.

It's however possible to create domain wide cookies. Please read the cookie RFC how to set a Cookie for the whole domain including all subdomains.

Comment 2

[tsunamy_boy]

ok thanks for your clarification : )