[Webkit-unassigned] [Bug 196490] New: Storage Access API: hasStorageAccess does not take into account unvisited state

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=196490

            Bug ID: 196490
           Summary: Storage Access API: hasStorageAccess does not take
                    into account unvisited state
           Product: WebKit
           Version: Safari 12
          Hardware: Macintosh
                OS: macOS 10.14
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore JavaScript
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: r+webkit at mko.re

After giving storage access through the Storage Access API, I cleared all browser cookies. After clearing the cookies, hasStorageAccess() of my webpage in an iframe (unexpectedly) returns 'true', but setting cookies has no effect. This is fixed when I open the domain hosting the page on toplevel, and set any cookie (e.g. through document.cookie). Then, hasStorageAccess() within an iframe correctly returns 'false' again.

I was expecting everything storage-related to be handled through the storage access API (i.e. hasStorageAccess() would return 'false', and requesting storage access would no longer require opening the page as a first party site and set a dummy cookie as it used to).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190402/f9850fda/attachment-0001.html>