Details
-
Task
-
Resolution: Unresolved
-
P2: Important
-
None
-
None
-
None
Description
We already have some checking internally so that we don't apply cookies outside of the host. But we don't do this through the 'hostOnly' property, nor do we expose or export the hostOnly property through API (setHostOnly(), hostOnly() + part of the toRawForm output).
One potential issue is that hostOnly cookies exported before and after the change should still not be applied to any not-host.
This is part of RFC6265