[Webkit-unassigned] [Bug 202435] New: Storage Access API: document.hasStorageAccess() should return true when the cookie policy allows access

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Oct 1 15:23:58 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=202435

            Bug ID: 202435
           Summary: Storage Access API: document.hasStorageAccess() should
                    return true when the cookie policy allows access
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: wilander at apple.com

WebKit's Storage Access API implementation has so far only looked at whether ITP is blocking cookie access or not. However, the default cookie policy is still in effect underneath ITP. document.hasStorageAccess() should return true if the third-party a) is not classified by ITP and b) has cookies which implies it can use cookies as third-party according to the default cookie policy.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20191001/02dcbe2d/attachment.html>


More information about the webkit-unassigned mailing list