Help get this topic noticed by sharing it on Twitter, Facebook, or email.
I’m sad
vasili.revelas February 25, 2011 09:24

cookie regexes need tightening

the cookie blocking regex patterns in lsos.db aren't specific enough. for example, the "collective media" pattern of "/(collective-media\\.net|collective\\.com)/" also blocks cookies from my company's websites at trac.techcollective.com and mercury.techcollective.com, which prevents me from logging in (both sites use cross-site request forgery tokens set in cookies).
1 person has
this problem +1
Reply