internet explorer 9 - IE9 Separate cookies for third party request -
even though p3p headers correct, ie9 seems hold separate list third party requests.
i've added following p3p
header('p3p:cp="noi dsp cor cura adma deva psaa psda our bus ind uni com nav int", policyref="http://domain/w3c/p3p.xml"') of course domain set. it's created ibm tool. next i've created p3p xml file , tested p3p validation.
once call test file stating nothing more then
<?php header ('p3p:cp="noi dsp cor cura adma deva psaa psda our bus ind uni com nav int", policyref="http://padrichem.ds1.nl.dev/w3c/p3p.xml"'); session_start(); var_dump($_cookie); it says $_cookie empty, refresh , says $_cookie[phpsessid] = 'id'
now call same file remote location within iframe says $_cookie empty, refresh , says $_cookie[phpsessid] = 'different id'
when disable protected mode isn't case. yet isn't case on domains.
on harddrive can find cookies set iframe (third-party) call.
does have idea why occur?
you issue because of how ie treats cookies in cross-zone scenarios:
refer followings:
ie9 - asp.net cannot access cookie created domain third party site
beware cookie sharing in cross-zone scenarios
Comments
Post a Comment