1 files changed, 7 insertions, 1 deletions
diff --git a/app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt b/app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt
index de9416b..f26a35c 100644
--- a/app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt
+++ b/app/src/main/java/org/terst/feedreader/ui/BrowserScreen.kt
@@ -97,7 +97,13 @@ fun BrowserScreen(startUrl: String, onBack: () -> Unit) {
                         settings.javaScriptEnabled = true
                         settings.domStorageEnabled = true
                         CookieManager.getInstance().setAcceptCookie(true)
-                        CookieManager.getInstance().setAcceptThirdPartyCookies(this, true)
+                        // Deliberately NOT setAcceptThirdPartyCookies: the login-persistence
+                        // feature this screen exists for (see the class doc comment) only
+                        // needs a site's own FIRST-party session cookie to reach the
+                        // extraction WebView -- third-party cookies are for cross-site
+                        // trackers embedded within whatever page is loaded here, which this
+                        // feature has no use for and which only adds tracking surface shared
+                        // with every other WebView in the app.
                         webViewClient = object : WebViewClient() {
                             override fun onPageFinished(view: WebView, url: String) {
                                 title = view.title