Microsoft KB Archive/298780

= Any Existing Cookies Can Still Be Read by a Web Site Even When the &quot;Block&quot; Option Is Selected =

Article ID: 298780

Article Last Modified on 1/31/2007

-

APPLIES TO


 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0

-



This article was previously published under Q298780



SYMPTOMS
Any cookies that are currently stored on your computer can still be read (by means of a browser) by the Web site that created them (without a prompt) even if you have selected to block or prompt for cookies by using either the Block or Prompt options for either first-party or third-party cookies in the Override automatic cookie handling section of the Advanced Privacy Settings dialog box.

Note This issue does not occur if you use the Block All Cookies option on the Privacy tab slider. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

283185 How to Manage Cookies in Internet Explorer 6



CAUSE
This behavior can occur because the Block and Prompt options in the Advanced Privacy Settings dialog boxes only applies to new cookies that Web sites attempt to create on your computer. Any existing cookies can still be read by the Web site that created them.



WORKAROUND
To work around this behavior, use one of the following methods:

Delete any existing cookies that are stored on your computer for that particular Web site. For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

278835 How to Delete Cookie Files

Add the particular Web site to the Per Site Privacy Actions dialog box with a setting of Block as follows:

1. On the Privacy tab of Internet Options, click Edit.

2. Type the address of the particular Web site in the Address of Web site box, and then click Block.

3. Click OK twice.

NOTE: This method will delete any existing cookies that are stored on your computer for that particular Web site.Use the Block All Cookies setting by moving the slider on the Privacy tab. This setting prevents all Web sites from saving or reading any of its cookies on your computer.



STATUS
This behavior is by design.



MORE INFORMATION
If you move the slider on the Privacy tab to the Block All Cookies (or Accept All Cookies) setting, the Edit button becomes unavailable since Per Site Privacy Actions are ignored with these privacy settings. This behavior is by design.

Keywords: kbenv kbprb KB298780

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.