[Webkit-unassigned] [Bug 189045] Recent change in ITP2 behaviour blocks 3rd party cookies

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=189045

--- Comment #4 from Christopher Walker <christopher.walker at skybettingandgaming.com> ---
Hello, I've been working on a concrete example to help explain what we mean here:

To help us illustrate this we've pulled together a few example URL's mentioned below:

* https://itp-example-tracker.site/ - Simple "tracker site" that sets a cookie named itpTestTracker to a random value if not set.
* https://itp-example1.site/ - Simple "consumer site" that loads an iframe of the above tracker site.

Reproduction steps:

* Enable ITP Debugging in Safari
* Use the following command to tail for debug output  log stream -info | grep ResourceLoadStatisticsDebug
* Launch Safari Technology Preview (with all cookies/history cleared)
* Visit https://itp-example-tracker.site/ and allow it to set the itpTestTracker cookie to a random value
* Visit https://itp-example1.site/, https://itp-example2.site/, https://itp-example3.site/ repeatedly until you trigger ITP, you can see until this point the cookies are present.
* Eventually you will be given the following log output: About to block cookies in third-party contexts for: itp-example-tracker.site.
* From here all cookies are purged and blocked for the tracker site when loaded in context of the consumer site
* Even if we interact with the tracker site again (by loading it and submitting a form) we are still unable to set new cookies _and view existing ones_ in context of the consumer.


This is having the effect that our consumer sites can no longer under any circumstances set or access cookies on the

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180829/5867fcea/attachment.html>