[Webkit-unassigned] [Bug 35824] New: Relax 3rd party cookie policy in certain cases

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=35824

           Summary: Relax 3rd party cookie policy in certain cases
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Page Loading
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: beidson at apple.com


Currently the default WebKit + CFNetwork 3rd party cookie policy prevents any
changes to non-1st party cookies.  This is to prevent undesirable user tracking
from 3rd parties.

We should relax this policy a tad to allow setting 3rd party cookies when the
3rd party in question already has a cookie set.  This shouldn't actually open
up any new tracking vectors but will fix certain real world compatibility
issues.

Since the policy is only implemented by CFNetwork on Mac and Windows, and Mac +
Windows only patch to WebCore is upcoming.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.