[Webkit-unassigned] [Bug 211122] STP 105 Breaks Commenting on Jira

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=211122

--- Comment #14 from Chris Dumez <cdumez at apple.com> ---
(In reply to Chris Dumez from comment #13)
> (In reply to Chris Dumez from comment #12)
> > (In reply to Chris Dumez from comment #11)
> > > I created a test JIRA instance at
> > > https://apple-testing.atlassian.net/browse/WEB-1. I seem to be able to post
> > > comments on a JIRA bug with the latest WebKit, without any issue.
> > > 
> > > What kind of comment are you trying to post? Is it on a bug? Of course,
> > > there is always the possibility that the bug only reproduces on hosted
> > > instances.
> > 
> > Looking at Web Inspector, I do see a POST request when I submit a comment on
> > a JIRA bug:
> > 
> > Request
> > :method: POST
> > :scheme: https
> > :authority: apple-testing.atlassian.net
> > :path: /rest/api/3/issue/WEB-1/comment
> > Accept: application/json,text/javascript,*/*
> > Content-Type: application/json
> > Origin: https://apple-testing.atlassian.net
> > Cookie: [MASKED]
> > Content-Length: 130
> > Accept-Language: en-us
> > Host: apple-testing.atlassian.net
> > User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_16)
> > AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15
> > Referer: https://apple-testing.atlassian.net/browse/WEB-1
> > Accept-Encoding: gzip, deflate, br
> > Connection: keep-alive
> > 
> > Note that the Origin header looks correct. I am on WebKit r260952.
> 
> 
> What does the URL of the wrong POST request look like for you? Is it for the
> "/comment" one or something else?
> 
> I see this other POST request:
> 
> Request
> :method: POST
> :scheme: https
> :authority: api.atlassian.com
> :path: /metal/ingest
> Accept: */*
> Content-Type: text/plain;charset=UTF-8
> Origin: null
> Cookie: [MASKED]
> Cache-Control: max-age=0
> Accept-Language: en-us
> Host: api.atlassian.com
> User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_16)
> AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15
> Content-Length: 399
> Accept-Encoding: gzip, deflate, br
> Connection: keep-alive
> 
> Where the Origin is null (As explained by Rob earlier, this may be correct
> behavior, many things are taken into considering to determine what the
> Origin header should be).

Jack, if you look at the Network Response to the main document, do you see a Referrer-Policy header being served? If so, what is the value for the header?
My JIRA instance does not serve such a header, which could be why I cannot reproduce, especially if I am right that this was caused by Bug 209066.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200430/a4bbbc37/attachment.htm>