[Webkit-unassigned] [Bug 169846] New: Safari does not send HTTP_REFERER from iframe injected into parent iframe that has no src attribute

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Mar 18 10:15:36 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=169846

            Bug ID: 169846
           Summary: Safari does not send HTTP_REFERER from iframe injected
                    into parent iframe that has no src attribute
    Classification: Unclassified
           Product: WebKit
           Version: Safari 10
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: adam at sproutvideo.com

Safari / WebKit doesn't send the HTTP_REFERER header when loading an iframe that has been injected into a parent iframe that has no src attribute. This seems to be an issue unique to Safari. Chrome, Firefox, IE, Edge, Opera and Yandex all send the HTTP_REFERER header.

Steps to reproduce:
1) I set up a test case here: https://sproutvideo-examples.s3.amazonaws.com/iframe_problem.html . This page displays the request headers.

Expected Results:
The browser should send the HTTP_REFERER header with the request and the test case should display https://sproutvideo-examples.s3.amazonaws.com/iframe_problem.html as the HTTP_REFERER.

Actual Results:
The browser does not send the HTTP_REFERER header.


Platform:
All versions of Safari on all operating systems.

Other Platforms:
Every single browser (IE, Edge, Firefox, Chrome, Opera, Yandex) going back many versions and operating systems (Windows, MacOS/OSX, iOS, Android, etc) also going back several versions, behaves as expected and sends the HTTP_REFERER

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170318/fe717bea/attachment.html>


More information about the webkit-unassigned mailing list