gecko-dev/extensions
Chris Peterson f38368c9cc Bug 1160368 - Part 1: Add flag to treat third-party cookies set over nonsecure HTTP as session cookies. r=jdm
"Nonsecure HTTP" here just means regular, not-HTTPS HTTP. It doesn't mean HTTPS without the `Secure` cookie flag. Honor the expiration time of third-party cookies set over HTTPS, whether or not they have the `Secure` cookie flag. If a third-party cookie is set over HTTPS and then later sent in nonsecure HTTP request (which is allowed for cookies without the `Secure` cookie flag), the cookie won't be turned into a session cookie unless the nonsecure HTTP response sets a new cookie value.

This feature is controlled by the pref "network.cookie.thirdparty.nonsecureSessionOnly".

MozReview-Commit-ID: HlCg21JyvNC

--HG--
rename : extensions/cookie/test/unit/test_cookies_thirdparty_session.js => extensions/cookie/test/unit/test_cookies_thirdparty_nonsecure_session.js
extra : source : d1be2e4265201efd3ee93e965ac68561f548fd05
extra : intermediate-source : f5b382fa1b70e30a907b1f10d74f8c0c6dff344e
2017-02-16 19:27:49 -08:00
..
auth Bug 1409275 - Default to gssapi64 on 64-bit windows r=valentin 2017-10-18 12:38:01 -07:00
cookie Bug 1160368 - Part 1: Add flag to treat third-party cookies set over nonsecure HTTP as session cookies. r=jdm 2017-02-16 19:27:49 -08:00
permissions Bug 1390428 (part 9) - Remove nsXPIDLCString. r=erahm. 2017-08-17 15:29:03 +10:00
pref Bug 1404198: Part 2j - Switch to NS_NewTimer* everywhere else. r=njn 2017-09-24 19:57:48 -07:00
spellcheck Bug 1409921 - Add nondeterminism, nondeterministic and bimodal to the en-US dictionary. r=jet 2017-10-19 07:09:49 +07:00
universalchardet Bug 1404169 - Fix ubsan runtime error for nsSMState enum. r=m_kato 2017-09-28 19:37:00 -04:00
build.mk
confvars.sh
moz.build Bug 1332423 - add BUG_COMPONENT to extensions/* files. r=bsmedberg 2017-01-27 08:19:19 -05:00
moz.configure Bug 1286877 - do not set c-basic-offset for python-mode; r=gps 2016-07-14 10:16:42 -06:00