Re: [Netsurf-develop] netsurf security
On Fri, 26 May 2006, Christopher Bazley wrote:
On 23/05/06, John-Mark Bell <jmb202(a)ecs.soton.ac.uk> wrote:
>
> However, I believe SquirrelMail is known not to work with NetSurf due
> to the way we currently handle cookies. Additionally, NetSurf's cookie
> handling is completely broken at present.
Despite cookie handling being broken in current versions of Netsurf I
use a trick to access my Google mail account, and have done
successfully for several months. I wonder if you could do something
similar to access your SquirrelMail account?
I keep a very old version of Netsurf which I use to log in on the rare
occasion that the GMail cookie expires (at least I assume that's what
happens). Having logged in successfully I revert to using an up to
date version of NetSurf, because it is superior in every respect
except cookie handling.
It's not quite this simple - SquirrelMail's interface uses frames (or, at
the very least, embedded HTML objects). NetSurf currently doesn't send
cookies for embedded page objects regardless of whether the object is
being fetched from the same server as the containing document. This is the
issue with SquirrelMail (aside from the other broken cookies stuff). I
intend to fix all of this as part of my reimplementing cookies. I won't
be touching it again until the 14th of June at the earliest, however - I
have the minor detail of university finals to deal with between now and
then.
John.