More relaxing of cookie-setting rules

* Allow non-secure page to set (but not read) secure cookies * Allow pages to set cookies for subdomains (but not access them)
2014-06-09 11:17:49 +02:00
parent d888718621
commit 1cbab031fd
2 changed files with 35 additions and 9 deletions
@@ -87,6 +87,7 @@ private:
 			BString				_DefaultPathForUrl(const BUrl& url);

 			bool				_CanBeSetFromUrl(const BUrl& url) const;
+			bool				_CanBeSetFromDomain(const BString& path) const;
 			bool				_CanBeSetFromPath(const BString& path) const;

 private: