[Webkit-unassigned] [Bug 86067] [BlackBerry] Possible to clobber httponly cookie.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Jun 5 05:29:39 PDT 2012
https://bugs.webkit.org/show_bug.cgi?id=86067
--- Comment #43 from Jason <jason.liu at torchmobile.com.cn> 2012-06-05 05:29:39 PST ---
(In reply to comment #42)
> (In reply to comment #41)
> > (In reply to comment #40)
> > > (In reply to comment #38)
> > > > In my opinion, mac added this *.txt to make the old test *.php pass.
> > > > Although I changed the test case, mac's result will be also the same as *.txt.
> > > > So it is needed for mac all the same.
> > > > Do you agree with me?
> > >
> > > I'd hope that now that you use the cookies testing framework, the test passes on all platforms.
> >
> > I think mac fails because its httpOnly cookies can be changed by JavaScript.
>
> Ok, I manually verified this.
>
> Note that the platform/mac suppression will also apply to other ports, so when you land this change, there will be some redness.
>
> Anyway, can you comment on https://bugs.webkit.org/show_bug.cgi?id=87208 that the failure on mac is because of an actual bug in their cookie jar?
>
> otherwise, the patch looks good
I've added comments for 87208.
Thanks a lot for your help.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list