[Webkit-unassigned] [Bug 10957] HttpOnly Cookie Option

[bugzilla-daemon at webkit.org]

http://bugs.webkit.org/show_bug.cgi?id=10957





------- Comment #19 from darin at apple.com  2008-05-22 13:20 PDT -------
(In reply to comment #18)
> I think a code change to the WebCore/platform still needs to be made. Looking
> at the various CookieJar classes, it looks like it will be up to WebCore to
> disregard HttpOnly cookies -- they will still be passed to us from the
> underlying network layer.

I see. You're right -- it might turn out that way. Another design would be to
have HttpOnly cookies entirely invisible to the old API and add new API that
allows clients to see them. I guess we won't know what's required until this
gets implemented by the networking layer.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.