[wp-trac] [WordPress Trac] #25287: 3.6 introduced a cookie with a non-"wordpress_" prefix. Some reverse proxy setups affected.

WordPress Trac noreply at wordpress.org
Mon Oct 7 18:03:58 UTC 2013


#25287: 3.6 introduced a cookie with a non-"wordpress_" prefix. Some reverse proxy
setups affected.
--------------------------+--------------------
 Reporter:  markjaquith   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.6.2
Component:  General       |     Version:  3.6
 Severity:  normal        |  Resolution:
 Keywords:                |
--------------------------+--------------------

Comment (by johnbillion):

 What this needs:

  * Modify the server-side `setcookie()` so it also includes `COOKIEPATH`
 and `COOKIE_DOMAIN`.
  * Ensure that the path and domain arguments used when the cookie set
 client-side match these. This is in the `wpCookies` JS class.

 We won't switch to `wordpress-` as a prefix because this cookies doesn't
 need to be whitelisted to pass through a varnish proxy.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25287#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list