Bug 15139 – Cookies set on domain containing _ are not stored

• Status: RESOLVED
• Resolution: INVALID
• Component: New Bugs

[Jonathan Steinert]

Issue applies to www.livejournal.com. After logging in trying to access an account that doesn't exist with an underscaore in url, like:

http://lj_hodddd.livejournal.com/ will result in a user facing error of "too many HTTP redirects" or similar.

Behavior seems to be cookie named 'ljdomsess.lj_hodddd' not being stored properly, and not being sent with subsequent requests.

At least, that's the information I am aware of as bdash has explained to me.

[Mark Rowe (bdash)]

<rdar://problem/5458207>

[Mark Rowe (bdash)]

As discussed on IRC, this issue is below WebKit.  I've moved this bug to Radar and forwarded it to the appropriate team.  Thanks for the bug report.

[David Kilzer (:ddkilzer)]

Underscore (_) characters are not valid in hostnames, but are valid in domainnames.

http://domainkeys.sourceforge.net/underscore.html

[Mark Rowe (bdash)]

It works in other browsers, so I see no good reason that it shouldn't work in Safari either.

[Nick Muerdter]

I know underscores in domain names aren't exactly common, but I ran into this problem in a local development environment I have setup. I just happened to have an underscore as part of the domain, so everything on the site would work fine except for the cookies being set. This definitely threw me for a loop. As mentioned, this works fine in other browsers. I also noticed that it works fine in Safari 3.1 under Mac OS X 10.4--it only seems broken under 10.5. Which probably explains why this apparently isn't a WebKit issue. Anyway, just thought I'd share my experiences with this fun little bug..