[Webkit-unassigned] [Bug 218705] New: No cookies access for extension pages opened through browser.windows.create or in iframe

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Nov 9 06:08:20 PST 2020


https://bugs.webkit.org/show_bug.cgi?id=218705

            Bug ID: 218705
           Summary: No cookies access for extension pages opened through
                    browser.windows.create or in iframe
           Product: WebKit
           Version: Safari 14
          Hardware: Macintosh
                OS: All
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: Page Loading
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: winlinx at ya.ru
                CC: beidson at apple.com

This bug releated to Web Extensions in Safari 14.

When I try to open a window with browser.windows.create (or include an iframe on page) pointing to my index.html and inside of it I make an API requests to host (https) that explicitly specified in permissions manifest field, the cookies are not send to this host.

So in other words I can't do API requests to my own server from such windows. This works only from browser_action popover.

This behaviour differs from all other browsers, they allow to do this.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201109/8f8b7eb2/attachment.htm>


More information about the webkit-unassigned mailing list