[Webkit-unassigned] [Bug 196852] Unchecked "Prevent cross-site tracking" option behaves incorrectly

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Apr 12 11:31:45 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=196852

--- Comment #4 from r+webkit at mko.re ---
Thanks!

Not sure I understand yet how reading back the cookie can help. You can't do it pre-storage-access-request, since cookies aren't guaranteed to work yet (if the 3rd party is classified as tracker); and it's not supposed to work in the reject handler either (which is where the unchecked option takes you), since cookies won't work anyway for potentially other reasons (the user explicitly denying access, missing first party interaction, ...)?

I haven't tested what happens if the 3rd party isn't classified as a tracker, but we already do the cookie-write-read check in that case to detect the old WebKit behavior where cookies don't work if the site hasn't been opened (and used cookies) as first party yet.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190412/a190daa4/attachment.html>


More information about the webkit-unassigned mailing list