[Webkit-unassigned] [Bug 162576] New: Mark Ping{Handle, Load} as final

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Sep 26 13:26:32 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=162576

            Bug ID: 162576
           Summary: Mark Ping{Handle, Load} as final
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Local Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Platform
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: dbates at webkit.org
                CC: achristensen at apple.com

A ping request is a special network request. We should not support subclassing a ping handle because there are security/privacy implications with respect to redirect handling and including credentials/authentication with a ping request. Such aspects should not be changed or require careful consideration if changed.

For completeness, the HTML ping attribute and corresponding ping request that should be created is described in section "Hyperlink auditing" in the HTML standard: <https://html.spec.whatwg.org/multipage/semantics.html#hyperlink-auditing>.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160926/a0eea6ab/attachment.html>


More information about the webkit-unassigned mailing list