[Webkit-unassigned] [Bug 184733] New: HttpOnly cookies not included in Application Cache (appcache) requests

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=184733

            Bug ID: 184733
           Summary: HttpOnly cookies not included in Application Cache
                    (appcache) requests
           Product: WebKit
           Version: Safari 11
          Hardware: All
                OS: Unspecified
            Status: NEW
          Severity: Major
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: stefan.farthofer at portatour.com

Created attachment 338214

  --> https://bugs.webkit.org/attachment.cgi?id=338214&action=review

simple http server to repro the issue

Safari on iOS 11.3 and Safari 11.1 on OS X 10.12.6 (AppleWebKit/605.1.15) do not send HttpOnly cookies when requesting the application cache manifest or resources listed in the manifest.

This breaks offline capabilities for sites that use such cookies to decide which resources to make available offline.

Attached you'll find a simple python 3 program that acts as an HTTP server to repro the issue.

Expected output would be requests to /manfiest and /resource with cookies. On current safari those requests are sent without cookies however.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180418/e00a9a56/attachment.html>