[Webkit-unassigned] [Bug 255524] REGRESSION (Safari 16.4): Safari sometimes doesn't send cookies for assets requests and javascript fetch requests

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=255524

--- Comment #15 from Jerry Gregoire <jerry at arcadecoffee.com> ---
(In reply to youenn fablet from comment #13)
> (In reply to Jerry Gregoire from comment #12)
> > (In reply to youenn fablet from comment #11)
> > > Is there a way to reproduce, even flakily, the bug?
> > 
> > Yes, I have been able to using a Python/Flask app. Watch the 'session' token
> > value and refresh any endpoint (even an empty one). Within a few refreshes,
> > the session token will change, having been re-issued as the browser failed
> > to deliver it's previous token to the server.
> > 
> > Perform the same test using a 'private' session or using any other browser
> > and watch as the session token remains 'stable'.
> 
> Can you provide me (privately or publicly) access to this repro app?

The current (and all of the previous releases from the last 18 months) of Airflow exhibit the behavior. I can bundle something up if it helps but you should be able to fire it up like this:

1. Create a python virtual environment and activate it
2. Run `pip install apache-airflow`
3. Run `airflow webserver`
4. Open 'http://0.0.0.0:8080' in Safari
5. Watch the 'session' token in the developer console as you click repeatedly on the pinwheel logo in the upper right corner.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230421/ecd4a9ac/attachment.htm>