[Webkit-unassigned] [Bug 28431] New: Application Cache doesn't work with HTTP authentication

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Aug 18 10:18:06 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=28431

           Summary: Application Cache doesn't work with HTTP
                    authentication
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org


When updating an application cache, the user is not asked for credentials,
which makes sense. However, credentials that already exist in credential
storage also aren't used.

I'm not sure if it makes huge sense to cache authenticated resources - once
they are cached, they become available to anyone who asks, even after browser
restart. Also, there is no way to make appcache store several versions of
content that depends on user identity (cookies have the same problem). But if
web developers want to, we probably shouldn't stop them. This works in Firefox,
FWIW.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the webkit-unassigned mailing list