[Webkit-unassigned] [Bug 28325] New: Safari not handling quoted paths correctly in version 1 cookies

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Aug 14 15:20:20 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=28325

           Summary: Safari not handling quoted paths correctly in version
                    1 cookies
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: P2
         Component: WebKit Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: andrejohn.mas at gmail.com


Created an attachment (id=34876)
 --> (https://bugs.webkit.org/attachment.cgi?id=34876)
Test case illustrating the issue. JSP file.

Tested with Safari 4.0.2 with Windows XP SP2.

If the cookie version is set to '1' in either WebLogic or Tomcat, and the path
is set, then the value is quoted:

Set-Cookie: Customer="WILE_E_COYOTE"; Version="1"; Path="/"

Which is correct behaviour according to RFC 2109 (examples in section 5). The
problem is that Safari treats the quotes as if they were part of the part,
rather than simply surrounding the path. This can be observed by trying to read
the cookie value back on the server when the browser points to the root of the
server:

http://.../

Also, when looking at the cookies in the preferences, the path shown is:

%22/%22

I have attached a JSP file as a test case.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list