[Webkit-unassigned] [Bug 218863] New: [SOUP] ITP should cap the expiry of persistent cookies set in 3rd-party CNAME cloaked HTTP responses
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Thu Nov 12 11:21:14 PST 2020
https://bugs.webkit.org/show_bug.cgi?id=218863
Bug ID: 218863
Summary: [SOUP] ITP should cap the expiry of persistent cookies
set in 3rd-party CNAME cloaked HTTP responses
Product: WebKit
Version: WebKit Nightly Build
Hardware: PC
OS: Linux
Status: NEW
Severity: Normal
Priority: P2
Component: WebKitGTK
Assignee: webkit-unassigned at lists.webkit.org
Reporter: mcatanzaro at gnome.org
CC: bugs-noreply at webkitgtk.org, pgriffis at igalia.com
ITP should protect against CNAME cloaking. This requires soup-specific code. See:
https://webkit.org/blog/11338/cname-cloaking-and-bounce-tracking-defense/
https://trac.webkit.org/changeset/265389/webkit
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201112/4370ec07/attachment-0001.htm>
More information about the webkit-unassigned
mailing list