Skip to content

ljjgdfs/CookieIsolator

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

CookieIsolator

Separating HTTP and HTTPS cookies

  1. Isolation Policy
  • Disable: Disable cookie isolation.
  • Basic Isolation: Isolate HTTP and HTTPS cookies without blocking.
  • Loose Isolation: HTTP cookies can only be sent in HTTP channel while HTTPS cookies can be sent in both HTTP (without secure flag) and HTTPS channel.
  • Strict Isolation: HTTP cookies and HTTPS cookies can only be sent in HTTP and HTTPS channel separately.
  • Ext Secure Flag: Assure the integrity of cookies with secure flag: + Cookie secure flag cannot be set in HTTP channel; + Cookie with secure flag will not be shadowed by cookie who has a same name but does not have secure flag.
  1. Cookie Priority
  • HTTP First: In "Cookie" header, HTTP cookies are put in front of HTTPS cookies.
  • HTTPS First: In "Cookie" header, HTTPS cookies are put in front of HTTP cookies.
  1. Management
  • Clear All: Clear all the cookies in storage.
  • Clear Session: Clear all non-persistent cookies in storage.
  • Report Error

About

Separating HTTP and HTTPS cookies

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published