Comment #5 on issue 16658 by saso.badovinac: Cross-Context Leakage of  
First-party cookies to Third-party cookies
http://code.google.com/p/chromium/issues/detail?id=16658

if you read some of the comments on those pages you will see that the whole  
idea of
this second test "Cookie Contexts" is how third-party cookies are handled.

so it only happens when we restrict third-party cookies because this test  
tests the
trick when you visit a page and third-party cookies are blocked directly  
from the
"first-party" page, then they redirect you to the third-party page, so that  
that
third-party page becomes briefly a first-party and is able to set a cookie  
as a
first-party, but then redirects you back to the original page, NOW our  
purple dots
happens, we have our third-party cookies blocked so sites are not able to  
set/install
them, but using the above trick they ware able to set them as a first-party  
and are
now able to read/track them as third-party. so the issue here is to block  
outgoing
cookies.

alot of detailed informations around this can be found at  
http://www.grc.com/cookies/

from the page http://www.grc.com/cookies/fameandshame.htm it can be seen  
that only
firefox and opera seems to be doing this (passing this test)

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to