[Webkit-unassigned] [Bug 19829] New: WebKit does not follow tail-matching algorithm for domain cookies

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jun 30 11:24:41 PDT 2008


https://bugs.webkit.org/show_bug.cgi?id=19829

           Summary: WebKit does not follow tail-matching algorithm for
                    domain cookies
           Product: WebKit
           Version: 525.x (Safari 3.1)
          Platform: Macintosh
        OS/Version: Mac OS X 10.4
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Platform
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: daniel.doubleday at gmx.net


My Server does (Javaish):

Cookie cookie = new Cookie("testcookie", "testvalue");
cookie.setDomain(".foo.com");
response.addCookie(cookie);

Problem:

Webkit (tested with Safari and Adobe AIR) does send this cookie to server
bar.foo.com but *not* to baz.bar.foo.com which I believe it should according to
the 'spec'.

>From http://wp.netscape.com/newsref/std/cookie_spec.html
<snip>
When searching the cookie list for valid cookies, a comparison of the domain
attributes of the cookie is made with the Internet domain name of the host from
which the URL will be fetched. If there is a tail match, then the cookie will
go through path matching to see if it should be sent. "Tail matching" means
that domain attribute is matched against the tail of the fully qualified domain
name of the host. A domain attribute of "acme.com" would match host names
"anvil.acme.com" as well as "shipping.crate.acme.com". 
</snip>


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list