[Webkit-unassigned] [Bug 200857] iOS 13 beta: WKWebView does not include cookies/credentials in cross-origin-requests

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=200857

--- Comment #8 from John Wilander <wilander at apple.com> ---
(In reply to youenn fablet from comment #7)
> > Disabling cross-site-tracking on iOS 13 does not work. Cookies are blocked
> > in Safari anyways.
> 
> AIUI, the bug seems to be that cross-site tracking stays enabled even though
> it was disabled from Safari preferences.
> Is that right? Is there anything specific related to WKWebView?

I believe, ITP is a red herring here, Youenn. It has never been on outside Safari as far as I know. My hunch is that something in the rules around Fetch credentials has changed for the protocol or host they’re using, i.e. non-http(s) scheme and/or a host without TLD such as localhost.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190819/9f144cea/attachment.html>