[Webkit-unassigned] [Bug 86067] [BlackBerry] Possible to clobber httponly cookie.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=86067





--- Comment #12 from Jason <jason.liu at torchmobile.com.cn>  2012-05-22 01:08:00 PST ---
(In reply to comment #10)
> (From update of attachment 143215 [details])
> View in context: https://bugs.webkit.org/attachment.cgi?id=143215&action=review
> 
> > Source/WebCore/platform/blackberry/CookieMap.cpp:57
> > +ParsedCookie* CookieMap::addOrReplaceCookie(ParsedCookie* cookie, CookieFilter filter)
> 
> I think the semantics that returning cookie means the cookie was not added is very unclear.
> 
> Can you make it return a bool indicating whether the cookie was added or not, and add a parameter ParsedCookie** replacedCookie which is set to the replaced cookie if the return value is true?

Let me have a look. Thanks for your high-speed reply and this good suggestion.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.