[Webkit-unassigned] [Bug 181850] New: Cross-origin storage in "Add to home screen" apps always lost

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jan 19 06:10:43 PST 2018


https://bugs.webkit.org/show_bug.cgi?id=181850

            Bug ID: 181850
           Summary: Cross-origin storage in "Add to home screen" apps
                    always lost
           Product: WebKit
           Version: Safari 11
          Hardware: iPhone / iPad
                OS: iOS 11
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ashley at scirra.com

Web apps run from the home screen don't persist any storage which isn't on the main origin. This is related to issue 181849 and the repro here simply uses a cross-origin iframe of the other test. Demo:

1) Visit https://downloads.scirra.com/misc/bugs/iosframedstorage/
2) Add the page to the home screen
3) Close Safari
4) Open the home screen app
5) Enter the number 123 and press 'Save'
6) Close the home screen app
7) Open the home screen app
8) Press 'Load'

Expected result: text to change to "Loaded: 123"
Observed result: text changes to "Loaded: null"

Our PWA (editor.construct.net) uses a cross-origin, iframed login form for improved security. However due to this bug, saved login details are never remembered when running from the home screen. This means, combined with issue 181849, anyone who uses our PWA from the home screen can never have their login details saved; they must re-enter them every time they load the app.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180119/df87ebf1/attachment-0001.html>


More information about the webkit-unassigned mailing list