SSL Labs ScoreSecurityHeaders.io Score

Log in to participate

There is no cost to join RicheyWeb, and membership is a requirement to submit bug reports and participate in the support forums.

× EU e-Privacy Directive needs your help!

A free extension like this survives only by reputation. You can help by submitting a review in the Joomla Extension Directory. Please take the time to make a review by clicking on the link below (opens in a new window)

extensions.joomla.org/write-review/review/add?extension_id=4850

youtube cookie still active, even though I disabled cookies.

More
6 months 2 weeks ago #2297 by michael
michael replied the topic: youtube cookie still active, even though I disabled cookies.
If the page loads any element from youtube.com, your browser will retrieve any youtube.com cookie it has stored and send it with the request to youtube.

The same-origin policy enforced by browsers means that the only thing I cookie I can manipulate are cookies from my own domain. Other cookies I can only block by preventing the resources from loading. The resources I load from youtube on playback don't set cookies, so if one appeared - it was already in your browser and there's no way for me to detect that (same-origin policy)

I believe that if you delete that cookie, you'll find that you're logged out of youtube, which means it's the youtube login/session cookie (set when you log into youtube/google)

Please Log in or Create an account to join the conversation.

More
6 months 2 weeks ago #2299 by michael
michael replied the topic: youtube cookie still active, even though I disabled cookies.
Yay - you're running Ubuntu! I don't see too many fellow Linux folks.

Please Log in or Create an account to join the conversation.

More
6 months 2 weeks ago - 6 months 2 weeks ago #2302 by bobptz
bobptz replied the topic: youtube cookie still active, even though I disabled cookies.
Hi Michael

I thought that we are responsible for all third party stuff on our website. So if a user says DECLINE ALL COOKIES, somehow we have to not affect the user's pc with cookies at all. Even if this means to make our website completely dysfunctional.

I made this much simpler test.

I cleaned up all cookies from chrome.

Then I visited your page ( www.richeyweb.com/software/joomla/plugin...nalytics-cookie-free ). Immediately chrome reported those cookies:
i.imgur.com/PDwqHvS.png

Your page was reporting no cookies yet.

Then on your page, I DECLINED cookies. No cookies n your page yet. Then I started playing the youtube video on the page. And here is the cookie again:
i.imgur.com/RHSJIJN.png
Last Edit: 6 months 2 weeks ago by bobptz.

Please Log in or Create an account to join the conversation.

More
6 months 2 weeks ago #2308 by michael
michael replied the topic: youtube cookie still active, even though I disabled cookies.
That just says there is a cookie, doesn't say were it came from.

When you load the page, go to your "network" tab, and down the list of loaded elements until you see a "Set-Cookie" header. for an element coming from youtube-nocookies.com

When I load it in an incognito window - no cookies are delivered. My guess is that it's something already in your browsers cookie jar.

Please Log in or Create an account to join the conversation.

More
6 months 2 weeks ago - 6 months 2 weeks ago #2309 by bobptz
bobptz replied the topic: youtube cookie still active, even though I disabled cookies.
Hi Michael

>>>>>
When you load the page, go to your "network" tab, and down the list of loaded elements until you see a "Set-Cookie" header. for an element coming from youtube-nocookies.com
<<<<<
I tried but could not follow your instructions. Here s what I got:
i.imgur.com/xC0EGna.png

Here is what I did:
1) Go to Chrome Incognito mode.
2) Go to chrome settings (cookies) page.
3) Clean all cookies.
4) Add a page tab (google.com)
5) Clean cookies again (obviously created from google.com).
6) In the new tab, paste the url : www.richeyweb.com/software/joomla/plugin...nalytics-cookie-free and Decline Cookies.
7) Chrome-Inspect shows no cookies on this page.
8 ) Go to chrome settings, there are 6 cookie entries. I assume they came from your page, but I am not sure.
9) Start the video on your page.
10) Chrome-Inspect still shows no cookies on this page. Contrary to what I had noticed before ( i.imgur.com/RHSJIJN.png ).
11) Go to chrome settings, there are at least 11 cookie entries. I assume the new ones came from the video that just started, but again I cannot be sure.

Last Edit: 6 months 2 weeks ago by bobptz.

Please Log in or Create an account to join the conversation.

More
6 months 2 weeks ago #2311 by michael
michael replied the topic: youtube cookie still active, even though I disabled cookies.
Using the network tab, you can track every element loaded from every resource to see where cookies come from. I've done this many times for my no-cookies extensions. These cookies can come from browser extensions, or even other browser windows you have open.

The incognito window doesn't have separate settings - when you open the cookie view, it's all of chrome, not just the incognito window. If you have another window open, it can affect the contents of that list.

you might also try looking at the content of those cookies, not just the list of domains. Like the applications tab, it may be listing domains that have no cookies (Normal operation in the applications tab)

Please Log in or Create an account to join the conversation.

  • Not Allowed: to create new topic.
  • Not Allowed: to reply.
  • Not Allowed: to add attachements.
  • Not Allowed: to edit your message.
Kunena Forum