[Webkit-unassigned] [Bug 213510] iOS 14: ITP causes issues for hybrid (WKWebView) apps using cookies for authentication etc.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=213510

--- Comment #24 from Brent Fulgham <bfulgham at webkit.org> ---
(In reply to Darryl Pogue from comment #21)
> For the case described by Adam where an app needs to communicate with one
> domain (or a small of domains), would listing those specific domains in
> WKAppBoundDomains allow those cookies to work as expected? (Guessing based
> on bug 210674)

That's an off-by-default experimental thing that isn't available in normal use.

To clarify:

When App-Bound domains are in use you have this behavior:

(1) WKWebView would only have script injection and style injection capabilities on the sites listed in the set of app bound domains.
(2) WKWebView marked as 'app bound' would be unable to navigate to domains outside of that set. I.e., if you wanted to support general web browsing, you would need to create a separate WebView for that use.

This flag would have the following effect:

(3) Cross-site cookie access between domains in the App-bound domain list would be permitted, and they would be protected from deletion.

Is that behavior sufficient to meet your needs? Or would you still have problems with that mode?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201016/ccd510c5/attachment.htm>