Has anyone noticed that session cookies in Safari don't expire when they should? I have a page hosted in Tomcat which creates session cookies with a -1 expiration - which is supposed to bind the cookie to the life of the browser window. The implications of this are that when you have two different windows open, each window has it's own session, and that when a window is closed the session is orphaned.
Well, neither of these happens in Safari. Once I login to a site, any number of new windows share that same session - and even closing all windows does not expire the cookie.
I tried reporting this to Safari but the bug button doesn't seem to be quite appropriate.