Bug 28325 - Safari not handling quoted paths correctly in version 1 cookies
Summary: Safari not handling quoted paths correctly in version 1 cookies
Status: RESOLVED INVALID
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Misc. (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC Windows XP
: P2 Major
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2009-08-14 15:20 PDT by Andre-John Mas
Modified: 2009-08-14 15:45 PDT (History)
1 user (show)

See Also:


Attachments
Test case illustrating the issue. JSP file. (1.22 KB, text/plain)
2009-08-14 15:20 PDT, Andre-John Mas
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Andre-John Mas 2009-08-14 15:20:19 PDT
Created attachment 34876 [details]
Test case illustrating the issue. JSP file.

Tested with Safari 4.0.2 with Windows XP SP2.

If the cookie version is set to '1' in either WebLogic or Tomcat, and the path is set, then the value is quoted:

Set-Cookie: Customer="WILE_E_COYOTE"; Version="1"; Path="/"

Which is correct behaviour according to RFC 2109 (examples in section 5). The problem is that Safari treats the quotes as if they were part of the part, rather than simply surrounding the path. This can be observed by trying to read the cookie value back on the server when the browser points to the root of the server:

http://.../

Also, when looking at the cookies in the preferences, the path shown is:

%22/%22

I have attached a JSP file as a test case.
Comment 1 Andre-John Mas 2009-08-14 15:29:16 PDT
radar: 7144692
Comment 2 Mark Rowe (bdash) 2009-08-14 15:45:59 PDT
Cookie parsing is not handled by WebKit.  This issue will be tracked via the Radar that you filed.