bug 313414 process cookies only after sending http-on-examine-response, to allow

the observer to do stuff to the cookie header (modify or delete it)
r+sr=darin

netwerk/protocol/http/src/nsHttpChannel.cpp

@@ -776,12 +776,13 @@ nsHttpChannel::ProcessResponse()
     LOG(("nsHttpChannel::ProcessResponse [this=%x httpStatus=%u]\n",
         this, httpStatus));
 
-    // set cookies, if any exist
-    SetCookie(mResponseHead->PeekHeader(nsHttp::Set_Cookie));
-
     // notify "http-on-examine-response" observers
     gHttpHandler->OnExamineResponse(this);
 
+    // set cookies, if any exist; done after OnExamineResponse to allow those
+    // observers to modify the cookie response headers
+    SetCookie(mResponseHead->PeekHeader(nsHttp::Set_Cookie));
+
     // handle unused username and password in url (see bug 232567)
     if (httpStatus != 401 && httpStatus != 407) {
         CheckForSuperfluousAuth();