New issue
Advanced search Search tips

Issue 882451 link

Starred by 1 user
Status: WontFix
Owner:
pwnall@chromium.org
Closed: Sep 11
Cc:
slightlyoff@chromium.org
jsb...@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

possible to crash tab with cookieStore.set

Reported by ji...@warting.se, Sep 10 
Chrome Version       
68.0.3440.106 (Officiell version) (64 bitar)
1c32c539ce0065a41cb79da7bfcd2c71af1afe62-refs/branch-heads/3440@{#794}

This makes the browser tab crash

cookieStore.set({
  name: '__Secure-', // works with __Host- also
  value: '=',
  secure: false
})

Comment 1 by pwnall@chromium.org, Sep 11

Cc: -pwnall@chromium.org
Owner: pwnall@chromium.org
Status: WontFix (was: Unconfirmed)
Thank you for the bug report!

You're running an old version of Chrome. On stable (69) and Canary, the code snippet above yields the following:

VM64:1 Uncaught (in promise) TypeError: Failed to execute 'set' on 'CookieStore': __Secure- and __Host- cookies must be secure
    at <anonymous>:1:13
►

Sign in to add a comment