[Webkit-unassigned] [Bug 167521] New: Cross-origin redirects with preflight should be allowed

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=167521

            Bug ID: 167521
           Summary: Cross-origin redirects with preflight should be
                    allowed
    Classification: Unclassified
           Product: WebKit
           Version: Safari 10
          Hardware: Unspecified
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Platform
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: joeyparrish at google.com

In August 2016, the Fetch spec was updated [1] to allow cross-origin HTTP redirects, even w/ preflight requests.  All major browsers except Safari and Firefox have implemented the change.  This is preventing users of Shaka Player from using HTTP redirects for load balancing [2].  Media applications that do this kind of load balancing currently cannot be run in Safari.

To reproduce, simply load the repro page [3] in Safari and wait a few seconds for the request to fire.  You should see "OK, status = 200", indicating that the cross-origin redirect was followed.  In Safari, you see "FAILED", indicating that the redirect was not allowed by the browser.

[1] https://github.com/whatwg/fetch/commit/0d9a4db8bc02251cc9e391543bb3c1322fb882f2
[2] https://github.com/google/shaka-player/issues/666
[3] http://storage.googleapis.com/shaka-demo-assets/_bugs/cors_redirect/index.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170127/cbb200c9/attachment.html>