[Webkit-unassigned] [Bug 183245] New: [GTK] Unable to login to some websites because cookies are rejected

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=183245

            Bug ID: 183245
           Summary: [GTK] Unable to login to some websites because cookies
                    are rejected
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: lantw44 at gmail.com
                CC: bugs-noreply at webkitgtk.org

This problem can be found in both WebKitGTK+ 2.19.91 and svn trunk r229066. I am unable to login to FreeBSD Bugzilla and Phabricator with Epiphany because of the problem.

Steps to reproduce on FreeBSD Bugzilla:

1. Open https://bugs.freebsd.org.
2. Right-click on the page and choose 'Inspect Element'. Switch to the 'Storage' tab to see cookies.
3. Type email address and password to login. The login is successful, but no cookie is set.
4. Click 'New' on the page, and you will be asked to login again.

This is very inconvenient because I have to type password for every single operation.

Steps to reproduce on Phabricator:

1. Open https://reviews.freebsd.org. It is not specific to FreeBSD Phabricator. You can use other sites to test.
2. Right-click on the page and choose 'Inspect Element'. Switch to the 'Storage' tab to see cookies.
3. Click 'Log in' and type something in the login page. You don't need an account to reproduce the issue.
4. Phabricator refuses to check anything you submitted and show the following message.

Unhandled Exception ("AphrontMalformedRequestException")

You are trying to save some data to Phabricator, but the request your browser made included an incorrect token. Reload the page and try again. You may need to clear your cookies.
This was a Web request.
This request had an invalid CSRF token.

This makes it impossible to login. It is especially problematic for internal or private installation of Phabricator because they don't allow anonymous access.

Both issues can be worked around by setting the cookie policy to 'always accept' in Epiphany.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180301/32ee0dad/attachment.html>