So what's magical about Safari?

Chris Edwards ukcrypto at chiark.greenend.org.uk
Thu, 3 Apr 2008 23:13:16 +0100 (BST)


On Thu, 3 Apr 2008, Joel Harrison wrote:

| Safari ships with a conservative cookie policy which limits cookie
| writes to only the pages chosen ("navigated to") by the user. This
| default conservative policy may confuse frame based sites that attempt
| to write cookies and fail.

Interesting - I'd wondered what that safari pref really did...

Forgetting about fancy stuff like frames for the moment, if:

 I navigate to www.example.com, and phorm intercepts the request and 
 spoofs an HTTP 302 response redirecting me to www.websise.com/whatever
 which then attempts to set a webwise.com cookie

then are you saying safari will refuse this cookie, on the grounds that I 
hadn't "navigated" there myself ?  But other browsers accept the cookie ?