[Webkit-unassigned] [Bug 213879] Disable ITP in WKWebView used in hybrid native app

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Jan 17 15:06:38 PST 2021


https://bugs.webkit.org/show_bug.cgi?id=213879

--- Comment #9 from Eric Kampf <ekampf1 at gmail.com> ---
I have added my use case to the issue you noted: https://bugs.webkit.org/show_bug.cgi?id=213510.  Several of us have reported the same problem, with similarly structured apps: local web content which makes XHR calls to a remote domain.  Each of these apps is affected because the remote domain uses cookies for authentication. 

FWIW, I would not consider this bug report an accurate measure of the impact.  I have been wrestling with this problem for several weeks now and it took me that long to find my way to this bug report.  Cookie-based authentication is still widely used as is Apache Cordova.  Thus I suspect the number of apps impacted could be far greater than what is reported in this issue.

Can you provide some insight into whether or not this will be addressed in Webkit?  From what I hear, and do not hear, it sounds unlikely.  Either way it would be good to know so that we all can decide if we should pursue other work-arounds.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210117/016b2f41/attachment-0001.htm>


More information about the webkit-unassigned mailing list