Skip to main content
Home
X-notifier

Main navigation

  • Home
  • Forums
User account menu
  • Log in

Breadcrumb

  1. Home
  2. Forums
  3. Old forums
  4. X-notifier 3.x for Firefox (deprecated)

X-notifier hijacking cookies from other domains?

By Moriarty , 2 June 2013

I noticed a lot of cookies suddenly vanishing from firebugs cookie view while testing scripts on a domain. After investigating, I found out that the problem stopped after disabling X-notifier.

After looking in firefox's own cookie panel, and searching for the domain I was setting cookies on, I could see that the cookies I set, had a string appended to the domain in the form of [xn#gmail#MY-EMAIL#2]. I guess that this is the reason they are not showing up in firebugs cookie panel.

It seems like a critical bug!

Forums
X-notifier 3.x for Firefox (deprecated)

Moriarty

13 years 3 months ago

Related post

I found this post which seems to be related.

Strange cookies: http://xnotifier.tobwithu.com/dp/node/197

"It is normal. One is for background mail checking. #2 is used for opened tab."

Even if it's normal, it seems be causing some problems. Especially when it is meddling with unrelated cookies (ie cookies having nothing to do with mail accounts). In my case, it seems like it is overwriting the original cookie, when searching in firefox own cookie panel, as the cookie without the appended xn-string doesn't appear. But calling document.cookie in the firebug console in the tab with the domain, I can see the cookie I set in the cookiestring.

Moriarty

13 years 3 months ago

Possible workaround

It seems I resolved the issue by changing the below hidden option to false:

"extensions.xnotifier.saveCookies : true
save X-notifier's cookies to Firefox's cookie manager"

I don't know what this option does, i.e. what functionality I'm limiting by setting the value to false. But it seems I no longer have issues with cookies not showing up because they are getting the xn-string appended.

tobwithu

13 years 3 months ago

extensions.xnotifier

extensions.xnotifier.saveCookies
When it is set to 'true', X-notifier's cookies are saved in Firefox's cookie manager.
When it is set to 'false', X-notifier's cookies are not saved. They are on memories while Firefox is running.

 

Moriarty

13 years 3 months ago

In reply to extensions.xnotifier by tobwithu

Thank you for the elaboration

Thank you for the elaboration. Setting it to false is definitely the way to go then.

... However, it still seems like there is a bug when set to true.

Still, thanks for a great addon.

supercereal

13 years 3 months ago

More clues

Thank you for this, Moriarty and tobwithu. Since I installed X-notifier a few days ago, random domains would 'forget' my credentials, forcing me to login again. I disabled X-notifier when I realized it was causing the problem.

After seeing your thread I did a bit of testing, and found that X-notifier hijacks the cookies related to whatever other site tabs are open at the time I click the X-notifier icon to view my mail. That is, if I have linkedin.com, google.com and tobwithu.com tabs open, then click the X-notifier toolbar icon to view my mail, duplicate cookies will be written for those open tabs:

.mail.yahoo.com
.mail.yahoo.com[xn#yahoo#yourname%40yahoo.com#2]
.linkedin.com
.linkedin.com[xn#yahoo#
yourname%40yahoo.com#2]
.google.com
.google.com[xn#yahoo#
yourname%40yahoo.com#2]
.xnotifier.tobwithu.com
.xnotifier.tobwithu.com[xn#yahoo#
yourname%40yahoo.com#2]

So, for now I have toggled off extensions.xnotifier.saveCookies, and all is well.

I add my thanks too, tobwithu, for such a wonderful extension!

supercereal

13 years 3 months ago

correction

I spoke too soon.

Though I toggled extensions.xnotifier.saveCookies to false, the problem persists.
Clicking X-notifier causes other open tabs' cookies to not work. Closing then opening Firefox fixes the problem.
I am guessing it is affecting the cookies in memory? 

CFBancroft

13 years 3 months ago

Question for Tobwithu...

What Benfit saved cookie on 'Firefox's cookie manager'?

 

What Benfit not saved cookie, but 'on memories while Firefox is running'?

 

I would like for you to explain a bit more for X-N user and include me,
So that they will understand what your purpose regard to cookie handles.

Thanks, CFBancroft

 

tobwithu

13 years 3 months ago

Saving cookie on 'Firefox's

Saving cookie on 'Firefox's cookie manager
 - When you restart firefox, X-notifier uses those cookies. It means that X-notifier can access webmails quickly without login.

Not saving cookie on 'Firefox's cookie manager
- Prevent cookie related problems with other program.

tobwithu

13 years 3 months ago

@Moriarty

@Moriarty

I'm not sure what is your problem exactly.
However, it seems that it is related to the session manager in X-notifier.
http://xnotifier.tobwithu.com/dp/node/5

solstyce9

12 years 9 months ago

Scary

I'm having the same problem, two different computers.  It took a lot of enabling and disabling before I narrowed it down to X-Notifier.

I'm extremely sensitive to cookie misbehavior and was thinking an extension was stealing my authentication cookies.

I'll try disabling this preference to see if it helps, but if not, I'm going to have to uninstall X-notifier.  It's more important that my authentication cookies work correctly than I receive new mail notifications from my webmail accounts.

 

  • Log in or register to post comments
  • Neo can't see my Yahoo accounts unless I'm logged in
  • X-notifier Neo is back!
  • Default check interval not work
  • Delete X-notifier account
  • Yahoo Mail not working with X-Notifier Neo
More
  • Create new account
  • Reset your password
Powered by Drupal