[Webkit-unassigned] [Bug 149873] New: [Content Extensions] Content blocking rules are not consulted for pings (<a ping>)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=149873

            Bug ID: 149873
           Summary: [Content Extensions] Content blocking rules are not
                    consulted for pings (<a ping>)
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: roop+webkit at roopc.net

Created attachment 262592
  --> https://bugs.webkit.org/attachment.cgi?id=262592&action=review
Testcase showing use of pings with content blockers.

Given a webpage that contains a link with a 'ping' attribute, like this:

    <a href="nav_url" ping="ping_url">link</a>

when the user clicks on the link, in addition to the page navigating to 'nav_url', a ping is sent to 'ping_url' as a POST request.

This POST request should be subject to the rules specified in content blocker extensions.

Specifically, when there exists a content blocker rule like this:

    {
        "trigger": { "url-filter": "ping_url" }
        "action": "block"
    }

then, when the user clicks on the link specified above, the ping POST request should not be sent.

Similarly, when there exists a content blocker rule like this:

    {
        "trigger": { "url-filter": "ping_url" }
        "action": "block-cookies"
    }

then, when the user clicks on the link specified above, the ping POST request should be sent, but with cookies stripped off the request.

Currently, in both the above scenarios, the ping is sent with cookies, without consulting the content blocker rules.

The same problem was filed in radar as rdar://problem/22673784

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20151007/360efc04/attachment-0001.html>