[webkit-changes] [WebKit/WebKit] 126473: Cross-Origin-Embedder-Policy incorrectly blocks sc...

[Chris Dumez]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 126473bd1f9b742a3748fac9d58549504db485d0
      https://github.com/WebKit/WebKit/commit/126473bd1f9b742a3748fac9d58549504db485d0
  Author: Chris Dumez <cdumez at apple.com>
  Date:   2022-10-07 (Fri, 07 Oct 2022)

  Changed paths:
    A LayoutTests/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/require-corp-worker-script-revalidation-expected.txt
    A LayoutTests/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/require-corp-worker-script-revalidation.html
    A LayoutTests/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/resources/dedicated-worker-supporting-revalidation.py
    M Source/WebKit/NetworkProcess/NetworkResourceLoader.cpp

  Log Message:
  -----------
  Cross-Origin-Embedder-Policy incorrectly blocks scripts on cache hit
https://bugs.webkit.org/show_bug.cgi?id=245346
rdar://100389164

Reviewed by Brent Fulgham.

* LayoutTests/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/require-corp-worker-script-revalidation-expected.txt: Added.
* LayoutTests/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/require-corp-worker-script-revalidation.html: Added.
* LayoutTests/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/resources/dedicated-worker-supporting-revalidation.py: Added.
(main):
Add WPT test coverage (which I will upstream).

* Source/WebKit/NetworkProcess/NetworkResourceLoader.cpp:
(WebKit::NetworkResourceLoader::shouldInterruptWorkerLoadForCrossOriginEmbedderPolicy):
(WebKit::NetworkResourceLoader::didReceiveResponse):
If the response is a 304 revalidation response, make sure we get its COEP header from the cached
response to avoid blocking by the COEP logic. This is similar to what we were already doing for
the CORP header.

Canonical link: https://commits.webkit.org/255302@main