[tor-bugs] #8132 [EFF-HTTPS Everywhere]: [CHROME] Cookies rewriting infinite loop w/ Keep MORE|MY opt-outs installed

Sat Feb 2 02:13:10 UTC 2013

#8132: [CHROME] Cookies rewriting infinite loop w/ Keep MORE|MY opt-outs installed
----------------------------------+-----------------------------------------
 Reporter:  dtauerbach            |          Owner:  dtauerbach
     Type:  defect                |         Status:  assigned  
 Priority:  normal                |      Milestone:            
Component:  EFF-HTTPS Everywhere  |        Version:            
 Keywords:                        |         Parent:            
   Points:                        |   Actualpoints:            
----------------------------------+-----------------------------------------

Comment(by dtauerbach):

 Looking at the code, it seems KMOO uses "url" (with scheme) instead of
 "domain" to decide whether to regenerate a cookie:

 https://code.google.com/p/chrome-opt-out-
 extension/source/browse/trunk/chrome/KMOO.Cookie.js#119
 https://code.google.com/p/chrome-opt-out-
 extension/source/browse/trunk/chrome/KMOO.PolicyRegistry.js#85

 If this extension used domain instead, then I think that would avoid the
 infinite loop we're seeing.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8132#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online