Bug 247037

Summary: Safari strips whitespace around comma when setting with document.cookie
Product: WebKit Reporter: April King <april>
Component: WebCore Misc.Assignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: achristensen, ap, cdumez, webkit-bug-importer, wilander
Priority: P2 Keywords: InRadar
Version: Safari 16   
Hardware: Unspecified   
OS: Unspecified   

April King
Reported 2022-10-25 17:44:49 PDT
Extremely bizarre bug and I'm hard pressed to think of what would cause it but running this code: > document.cookie="foo=hello , world" < "foo=hello , world" > document.cookie < "foo=hello,world" Shows that setting a cookie to "hello , world" causes it to be saved as "hello,world". Note that using characters besides commas seem to not have this issue: > document.cookie="foo=hello $ world" < "foo=hello $ world" > document.cookie < "foo=hello $ world"
Attachments
Alexey Proskuryakov
Comment 1 2022-10-26 12:05:56 PDT
One theory is that the cookie value is parsed by a function that treats commas as in HTTP, separating multiple values. In NetworkStorageSessionCocoa.mm: NSHTTPCookie *initialCookie = [NSHTTPCookie _cookieForSetCookieString:cookieString forURL:cookieURL partition:nil];
Radar WebKit Bug Importer
Comment 2 2022-11-01 17:45:19 PDT
Note You need to log in before you can comment on or make changes to this bug.