Subject: bug#1401: 23.0.60; url-cookie-handle-set-cookie doesnt check for trusted urls

From: Lars Magne Ingebrigtsen <[email-masked]>
Date: Tue, 13 Sep 2011 21:38:03 +0200

Glenn Morris <[email-masked]> writes:

>> Is there a list of known safe two-dot domains that we could use out
>> there somewhere?
>
> http://publicsuffix.org/

Oh, dear.  That's a huge list.  

http://mxr.mozilla.org/mozilla-central/source/netwerk/dns/effective_tld_names.dat?raw=1

And it probably changes quite a bit.  Is it worth including this 70K
file in Emacs to deal with the cookie-setting problem?

-- 
(domestic pets only, the antidote for overdose, milk.)
  bloggy blog http://lars.ingebrigtsen.no/