Ignore auth cookies with value 'deleted'
authorGergő Tisza <tgr.huwiki@gmail.com>
Fri, 22 Jan 2016 06:14:07 +0000 (22:14 -0800)
committerGergő Tisza <tgr.huwiki@gmail.com>
Fri, 22 Jan 2016 22:29:03 +0000 (14:29 -0800)
commit9aa53627a53aabec0273cecf45a86e77927ef406
tree13634d5ad36f1de82328cc105454f815b0d4f3e8
parent973ce9708b8280b31373723a66131e251b125225
Ignore auth cookies with value 'deleted'

'deleted' is the value PHP sets when it deletes a cookie (via the
Expires/Max-Age headers). Apparently some clients ignore the
expiration date and send 'deleted' back; these clients now cannot
login due to some slight changes in exactly when cookies are
set/deleted during the login process.

To keep those clients from breaking, ignore this special value.

Bug: T124252
Change-Id: Icd0e1bcd8efe0869da981352763d25e4f8075bf2
includes/session/CookieSessionProvider.php