Firefox 3.0.6 breaks usage of getRequestHeader('Set-Cookie')

[mcm]

Hi zeank,

Now you cannot get Set-Cookie headers from XHR.

See https://bugzilla.mozilla.org/show_bug.cgi?id=380418

Only from version >=3.0.6 of FF!

ciao, mic

[mcm]

I forgot to mention that the problem can be reproduced on FF 3.0.6 + ejabberd native http-poll protocol.

[chadillac]

http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.6

MFSA 2009-05 XMLHttpRequest allows reading HTTPOnly cookies

getRequestHeader('Set-Cookie') returns null object after 3.0.6 update in HTTP-Polling for me as well.

[liquidx]

Confirmed on windows and linux firefox 3.0.6

Anyone have a fix?

[kevbo]

We are desperate for a fix for this! All our firefox users are totally hosed with chat. Help!

Thx :)

[liquidx]

Please?

[liquidx]

Would just like to offer a small update: This problem only exists with HTTP Polling, HTTP Binding does not have the issue.

[kevbo]

Any updates on this? This is a huge problem for us... we've had to disable our chat service because 40% of users are FF. Any status updates? PLEASE?????????????!!!!!!!!!!!!!!!!!!!!!

[zeank]

Sorry but there won't be a fix to this problem for HTTP Polling

The fix is to use HTTP Binding (aka BOSH) instead!