New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 850031 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: Jun 2018
Cc:
█ mkwst@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug
Team-Security-UX



Sign in to add a comment

Cookies for file:// urls are displayed as empty string

Project Member Reported by dullweber@chromium.org, Jun 6 2018 
chrome://settings/siteData shows cookies for file:/// urls with an empty host. Localstorage and other storage types are shown as belonging to "file:///".

The issue seems to be in CookiesTreeModel::PopulateCookieInfoWithFilter where the source of the CookieTreeHostNode is generated from the domain of a cookie, which is empty for file cookies.

Comment 1 by dullweber@chromium.org, Jun 6 2018 

The weird thing is that file:/// documents can't even access cookies but they can write to document.cookie and it will persist in the Cookies database

Comment 2 by msramek@chromium.org, Jun 6 2018

Cc: mkwst@chromium.org
...nor does loading a file:/// involve any headers in which cookies would be sent.

If that's the case, we should simply disable cookie APIs for file:///.

Comment 3 by dullweber@chromium.org, Jun 6 2018

Status: WontFix (was: Available)
This is not really a UI issue because writes to document.cookie probably shouldn't end up in the cookie database if the document can't read from it anyway. I will file a new bug to prevent writes to be persisted
►

Sign in to add a comment