[Webkit-unassigned] [Bug 200857] iOS 13 beta: WKWebView does not include cookies/credentials in cross-origin-requests

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Aug 23 06:31:15 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=200857

--- Comment #16 from Niklas Merz <niklasmerz at linux.com> ---
(In reply to youenn fablet from comment #15)
> I can repro the issue. This indeed seems like a regression.

Thank you very much for testing this. I'm really glad that this issue is confirmed.

> One workaround is to load the request that triggers setting cookies as a
> main document.
> Taking Niklas example:
> 1. load https://cors-test.appspot.com/test as main document. Cookies will be
> set.
> 2. load https://niklas.merz.dev/corstest
> 3. Do a cross-origin XHR/fetch, cookies should be included in the requests
> but response cookies will be discarded.
> 
> Not sure how practical this workaround is though.

This works indeed in the test app. For our app this is not practical. We trying  a couple of workarounds but a timely fix for this bug would be ideal.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190823/9161efa9/attachment-0001.html>


More information about the webkit-unassigned mailing list