[Webkit-unassigned] [Bug 86067] [BlackBerry] Possible to clobber httponly cookie.
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Mon May 21 04:23:46 PDT 2012
https://bugs.webkit.org/show_bug.cgi?id=86067
--- Comment #8 from Jason <jason.liu at torchmobile.com.cn> 2012-05-21 04:22:50 PST ---
(In reply to comment #7)
> (In reply to comment #3)
> > (From update of attachment 142647 [details] [details])
> > View in context: https://bugs.webkit.org/attachment.cgi?id=142647&action=review
> >
> > > Source/WebCore/platform/blackberry/CookieManager.h:82
> > > + void setCookies(const KURL&, const String& value, bool isHttpCookie = true);
> >
> > Would it be more consistent with the other methods in this class to define an enum instead of using a bool?
>
> (In reply to comment #5)
> > (From update of attachment 142647 [details] [details])
> > This seems incredibly inefficient. Is this the best we can do?
>
> I thought the cookies are always set by http. And they are seldom set by JavaScript. So I didn't want to add more code into setCookies' deeper code path which may decrease the performance of http cookies.
>
> Maybe above idea is wrong or there is a better method.
> Let me think it over.
I will change my patch.
--
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the webkit-unassigned
mailing list