[Webkit-unassigned] [Bug 228291] New: Referrer-Policy not properly applying with iframe redirections

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=228291

            Bug ID: 228291
           Summary: Referrer-Policy not properly applying with iframe
                    redirections
           Product: WebKit
           Version: WebKit Local Build
          Hardware: Unspecified
               URL: http://wpt.live/referrer-policy/gen/top.http-rp/same-o
                    rigin/iframe-tag.http.html
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Page Loading
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: gsnedders at apple.com
                CC: achristensen at apple.com, beidson at apple.com,
                    wilander at apple.com

wpt.fyi shows a variety of iframe-related failures:

https://wpt.fyi/results/referrer-policy/gen?label=master&label=experimental&product=chrome&product=firefox&product=webkitgtk&aligned&q=count%3A2%28status%3Apass%29%20none%28status%3Amissing%7Cstatus%3Anotrun%29%20%21sharedworker

(using WebKitGTK as it contains more recent fixes in this area than the latest STP run)

Essentially, regardless of where the policy is specified, we fail to apply a policy on redirection from same (HTTP, not HTTPS) origin, and hence end up sending the Referrer when we shouldn't.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210726/3172f464/attachment-0001.htm>