Bug#575754: epiphany-browser: Bug in cookies privacy settings

[Felipe Ignacio Cañas Sabat]

On Mon, 2010-05-17 at 12:05 -0300, Gustavo Noronha Silva wrote:
> On Sat, 2010-05-15 at 11:55 +0200, intrigeri wrote:
> > Hi,
> > 
> > Felipe Ignacio Cañas Sabat wrote (28 Mar 2010 22:29:19 GMT) :
> > > The option "Only [accept cookies] from sites you visit" option in
> > > epiphany-browser seems to be blocking any and all cookies.
> > 
> > Felipe, how about adding a simple testcase to this bug so that anyone
> > can easily reproduce and confirm it?
> 
> This should actually be fixed. It was caused by using an incompatible
> version of libsoup that would lead to not having the first party set on
> the message, so libsoup would always think the cookie was from/to a
> third party.
> 
> Can you please confirm this is no longer a problem in unstable, for you?
> 
> Thanks,
> 

I can confirm this bug was fixed. I am now using _testing_ and the bug
no longer exists.

However, the opposite seems to happen now (cookies from other domains
are popping up). I'd like confirmation here in case I'm mistaken.

For example, after having erased all cookies, I visit
http://www.emol.com (news site from Chile) and cookies from the
following sites pop up in my personal data:

.hits.e.cl
.emol.com
ads.emol.com
www.emol.com
.scorecardresearch.com

As I understand the configuration setting, the domains ".hits.e.cl" and
".scorecardresearch.com" have no business being added when I'm visiting
emol.com. Should this be filed as another bug?

Relevant packages,
libsoup2.4-1 v2.30.1-1
libwebkit-1.0-2 v1.1.90-1
epiphany-browser v2.29.3-1

Bye,
-Felipe