InformAction Forums

Hi,
some days ago I merged my delicious account with Yahoo (they have a sort of OpenID scheme to sign into their sites, like Flickr and delicious) and the site started forgetting my login every day; at first I suspected something went wrong with the merge, but after analyzing the cookies I discovered that one of them was set to expire at the end of every session while other browsers had an expiration period of months.

I figured out that either Adblock+ or Noscript had something to do with it and it turns out the culprit is the latter, even if delicious.com and yahoo.com are whitelisted in it.

Any setting I can tweak or is it a bug? Version is 2.0.7 in Firefox 4 beta 7.

(see http://support.delicious.com/forum/comm ... ionID=5630 for more info)

NoScript shouldn't touch your cookies unless NoScript Options|Advanced|HTTPS|Cookies|Enable automatic secure cookie management is enabled.
Is this your case?
Does the problem happen on a clean profile with default NoScript options?

Giorgio Maone wrote:NoScript shouldn't touch your cookies unless NoScript Options|Advanced|HTTPS|Cookies|Enable automatic secure cookie management is enabled.
Is this your case?

It is indeed.

Does the problem happen on a clean profile with default NoScript options?

Yes, it's still present with a fresh profile and NoScript just installed, with and without secure cookie management.

So you can confirm that on a clean profile, with the secure cookies option OFF and after clearing your cookies, the _user cookie is set to expire at the end of the session when NoScript is enabled?

Giorgio Maone wrote:So you can confirm that on a clean profile, with the secure cookies option OFF and after clearing your cookies, the _user cookie is set to expire at the end of the session when NoScript is enabled?

Yes, I double checked today.

Brownout wrote:

Giorgio Maone wrote:So you can confirm that on a clean profile, with the secure cookies option OFF and after clearing your cookies, the _user cookie is set to expire at the end of the session when NoScript is enabled?

Yes, I double checked today.

Then I've got no idea of what's going on.
You can try the following:

1. Set noscript.surrogates.enabled about:config preference to false and check
2. Disable ABE from NoScript Options|Advanced|ABE and check

Brownout wrote:

Giorgio Maone wrote:So you can confirm that on a clean profile, with the secure cookies option OFF and after clearing your cookies, the _user cookie is set to expire at the end of the session when NoScript is enabled?

Yes, I double checked today.

The check was flawed, it is the secure cookie management, as you said. Sorry, my bad.

Anyway, adding yahoo.com and delicious.com to the ignore list didn't solve the problem.

Brownout wrote:Anyway, adding yahoo.com and delicious.com to the ignore list didn't solve the problem.

Which domain does the cookie belong to, exactly?
Does adding .yahoo.com and .delicious.com help (notice the leading "." to include subdomains)?

Giorgio Maone wrote:

Brownout wrote:Anyway, adding yahoo.com and delicious.com to the ignore list didn't solve the problem.

Which domain does the cookie belong to, exactly?
Does adding .yahoo.com and .delicious.com help (notice the leading "." to include subdomains)?

.delicious.com did the trick.

Thanks for your help.