[Webkit-unassigned] [Bug 242894] New: "Cross-Origin-Opener-Policy: same-origin" breaks forms after back action
bugzilla-daemon at webkit.org
bugzilla-daemon at webkit.org
Tue Jul 19 03:53:04 PDT 2022
https://bugs.webkit.org/show_bug.cgi?id=242894
Bug ID: 242894
Summary: "Cross-Origin-Opener-Policy: same-origin" breaks forms
after back action
Product: WebKit
Version: Safari 15
Hardware: iPhone / iPad
OS: Unspecified
Status: NEW
Severity: Normal
Priority: P2
Component: History
Assignee: webkit-unassigned at lists.webkit.org
Reporter: andy at andrewingram.net
Created attachment 461009
--> https://bugs.webkit.org/attachment.cgi?id=461009&action=review
video-of-repro-demo
# Summary
On iOS Safari 15.5, if a page sets `Cross-Origin-Opener-Policy: same-origin` and a user navigates back to the page via the back button, form elements on that page aren't correctly interactive. Demo site: https://safari-bug-andy26.vercel.app
# Details
1. User is on a page without a COOP header (https://safari-bug-andy26.vercel.app)
2. User clicks a link to a page that sets COOP same-origin (https://safari-bug-andy26.vercel.app/api)
3. User submits a GET form with no action, or an action which is the same page - such that the same page is loaded with different query parameters. (https://safari-bug-andy26.vercel.app/api?select=day&search=)
4. User hits back button to return to the original form (https://safari-bug-andy26.vercel.app/api)
5. Form elements aren't correctly interactive. They can receive focus, but the keyboard isn't opened for text inputs, and the select box UI isn't shown for selects.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220719/0f5d4779/attachment.htm>
More information about the webkit-unassigned
mailing list