[Webkit-unassigned] [Bug 174210] New: "too many HTTP redirects" blocks iFrame content from loading

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=174210

            Bug ID: 174210
           Summary: "too many HTTP redirects" blocks iFrame content from
                    loading
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: Macintosh
                OS: macOS 10.12.4
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Frames
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: me at andrewray.me

How to reproduce:

 - Make a local HTML file and put this as the contents: <iframe src="https://app.box.com/dropbox/5febs67ox3humifvbcl4mv8d3p7b748n/1759106711?i=&d=1&w=400&h=300&t=&r=1" width="800" height="800"></iframe>
 - Open the webpage in Safari

Expected behavior: The iframe loads
Actual behavior: The iframe doesn't load.

Details:
 - In the Safari network request tab in the inspector, the request to app.box.com URL shows an error (the line is red), with a dash instead of a status code, and the message "Resource failed to load" but no other useful information
 - The console shows "too many HTTP redirects"

I tested a few variations of this and want to emphasize the reproducibility of this bug:
 - This does NOT happen because the iframe is in a local file. This behavior was noticed on our production website, which uses https. Putting it in a local file is the easiest way to reproduce it. You can see a live reproduction of this issue on https at https://www.grandrounds.com/recordupload
 - This has nothing to do with the query parameters passed to the iframe. Removing them does not fix the issue.
 - This has nothing to do with the width / height of the iframe, nor as far as I can tell, anything to do with the wrapping page content at all.
 - If you go directly to the iframe source in Safari, the page loads fine. Then, if you reload the page containing the iframe, the iframe content loads. The iframe content will continue to load until you manually clear the cache and cookies for the box domain. Then the iframe doesn't load again.
 - Nothing in the iframe source actually redirects. All linked assets in the box iframe do not return 3xx status codes.
 - All assets inside the iframe point to https URLs, so there is no http > https redirection going on
 - This behavior is reproducible in Safari Technology Preview, Release 34 (Safari 11.0, WebKit 12604.1.27.0.1)
 - This behavior is reproducible in vanilla Safari, Version 10.1.1 (12603.2.4)
 - This behavior is reproducible by all Safari users visiting the above URL, not just myself
 - This behavior is not reproducible in any other browser (Chrome, Firefox, IE)

Because I do not control the domain of the page that demonstrates the error, I can't debug any further. I don't know if this bug is specific to iframes but that seemed like the most relevant component to choose.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170706/32135a4a/attachment.html>