-
Notifications
You must be signed in to change notification settings - Fork 22.9k
Open
Labels
Content:HTTPHTTP docsHTTP docsaccepting PRFeel free to open a PR to resolve this issueFeel free to open a PR to resolve this issue
Description
MDN URL
https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies
What specific section or headline is this issue about?
Block access to your cookies
What information was incorrect, unhelpful, or incomplete?
"A cookie with the Secure attribute is only sent to the server with an encrypted request over the HTTPS protocol. It's never sent with unsecured HTTP (except on localhost)"
What did you expect to see?
WebKit will not forward Secure cookies to http://localhost
Do you have any supporting links, references, or citations?
https://bugs.webkit.org/show_bug.cgi?id=281149
https://github.com/WebKit/WebKit/blob/main/Source/WebCore/loader/CookieJar.cpp#L64
Do you have anything more you want to share?
I'm not sure if MDN documents bugs or broken implementations on certain platforms, but I'd assume this falls under Browse compatibility. I'd also change it myself but I'm not exactly sure how these are supposed to be formatted.
MDN metadata
Page report details
- Folder:
en-us/web/http/guides/cookies - MDN URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies
- GitHub URL: https://github.com/mdn/content/blob/main/files/en-us/web/http/guides/cookies/index.md
- Last commit: ac513ee
- Document last modified: 2025-09-01T15:58:46.000Z
Metadata
Metadata
Assignees
Labels
Content:HTTPHTTP docsHTTP docsaccepting PRFeel free to open a PR to resolve this issueFeel free to open a PR to resolve this issue