search

benlilaj / gears

Automatically exported from code.google.com/p/gears
0 stars 1 forks source link

Cookie handling corner case is "off by one". #844

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
Reported on behalf of a developer i received email from...

I think that I accidentally found a bizarre corner case in ResourceStore's 
cookie handling. When I create a ResourceStore with requiredCookie set to a 
1-character value, like 'a=0', 'a=1', or 'a=k', and then capture some 
resource, it's accessible whenever "a" cookie is set to any 1-character 
value, as long as it's only 1 character. It happens on FF3/Mac. It doesn't 
happen with two-character cookie values, although I can't be sure that 
there is no more complex pattern in this.

Original issue reported on code.google.com by mnord...@gmail.com on 3 Mar 2009 at 8:26

GoogleCodeExporter commented 9 years ago 
Occurs on other browsers/os's as well

Original comment by mnord...@gmail.com on 3 Mar 2009 at 8:52