> Incidentally, when the cookie spec was written, the different policies of
> the various country-code TLDs were considered too be too hard to cater to.
> As a result, it is possible to set a cookie that is sent back to all
> servers in, say, .com.au

Actually, I think we have a hack in the cookie code you can turn on which
prevents this... I was in there recently. It's some hidden pref.

Search LXR for nsCookie.cpp and nsCookies.cpp.

Gerv

Reply via email to