RESOLVED FIXED296267
Add cookie name prefix checks to Cookie Store API 
https://bugs.webkit.org/show_bug.cgi?id=296267
Summary Add cookie name prefix checks to Cookie Store API
Yoav Weiss
Reported 2025-07-21 04:04:25 PDT
https://github.com/httpwg/http-extensions/pull/3110 defined the `__Http-` and `__HostHttp-` prefixes. We should implement that in WebKit, to enable site operators to distinguish between cookies set through HTTP (with HttpOnly) and cookies that imitate them.
Attachments
Add attachment proposed patch, testcase, etc.
Yoav Weiss
Comment 1 2025-07-21 04:14:25 PDT
Pull request: https://github.com/WebKit/WebKit/pull/48318
Radar WebKit Bug Importer
Comment 2 2025-07-21 22:30:35 PDT
<rdar://problem/156373016>
Yoav Weiss
Comment 3 2025-08-12 02:40:45 PDT
Given https://github.com/whatwg/cookiestore/pull/286 and https://github.com/httpwg/http-extensions/pull/3153, we should implement the `__Host-Http-` cookie prefix, rather than `__HostHttp-`.
Anne van Kesteren
Comment 4 2025-08-12 04:15:31 PDT
Pull request: https://github.com/WebKit/WebKit/pull/49266
EWS
Comment 5 2025-08-12 23:45:05 PDT
Committed 298615@main (62b02335fdf4): <https://commits.webkit.org/298615@main> Reviewed commits have been landed. Closing PR #49266 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.