[Webkit-unassigned] [Bug 200857] iOS 13 beta: WKWebView does not include cookies/credentials in cross-origin-requests

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Aug 19 12:57:23 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=200857

--- Comment #10 from Niklas Merz <niklasmerz at linux.com> ---
(In reply to John Wilander from comment #8)
> (In reply to youenn fablet from comment #7)
> I believe, ITP is a red herring here, Youenn. It has never been on outside
> Safari as far as I know. 

You are probably right. Since iOS 13 Safari is not working as expected regardless of the ITP setting.

> My hunch is that something in the rules around
> Fetch credentials has changed for the protocol or host they’re using, i.e.
> non-http(s) scheme and/or a host without TLD such as localhost.

I can add that XMLHttpRequest is doing the same. I tested it on various origins like custom protocol localhost, IP and normal subdomains with HTTPS. As far as I know it happens regardless of the origin.

Did anyone try me test, yet? Would be good to know its not my fault and somebody else has the same issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190819/f290b31b/attachment.html>


More information about the webkit-unassigned mailing list