[Webkit-unassigned] [Bug 271700] REGRESSION (Safari 17): Infinite reloading iframes on MDN and other websites, when using a combination of lazy loading, Cache-Control and Clear-Site-Data

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=271700

--- Comment #11 from Karl Dubost <karlcow at apple.com> ---
Also while the inspector screenshot shows the same URI, this is not fully true. For me it was oscillating in between multiple requests.

Testing this page where the last example iframe exhibited the issue.
https://developer.mozilla.org/en-US/docs/Web/CSS/gap


I let it go until it stopped by itself, and around 6154 HTTP requests were done.

Including:
2254 to multi-column_layout
1620 to flex_layout
2210 to grid_layout

the requests are exactly all the same:

which is basically

:method: GET
:scheme: https
:authority: live.mdnplay.dev
:path: /en-US/docs/Web/CSS/gap/runner.html?id=flex_layout
Sec-Fetch-Site: same-origin
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Referer: https://live.mdnplay.dev/
Sec-Fetch-Dest: iframe
Cache-Control: max-age=0
Sec-Fetch-Mode: navigate
Host: live.mdnplay.dev
Accept-Language: en-US,en;q=0.9
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15
Accept-Encoding: gzip, deflate, br
Connection: keep-alive


The only difference in between them is the path 
:path: /en-US/docs/Web/CSS/gap/runner.html?id=multi-column_layout
:path: /en-US/docs/Web/CSS/gap/runner.html?id=flex_layout
:path: /en-US/docs/Web/CSS/gap/runner.html?id=grid_layout


I can't reproduce on internal builds.

Another which I found interesting, is the HTTP response, which was identical no matter the path. 

and the ETag was exactly the same. This is not logical. The runner.html?id=blah should have unique ETag 


Example of an HTTP response

:status: 200
Content-Encoding: br
Content-Security-Policy: default-src 'self' https:; script-src 'self' https: 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval'; script-src-elem 'self' https: 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval'; style-src 'report-sample' 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' blob: https: data:; base-uri 'self'; worker-src 'self'; manifest-src 'self';
Cache-Control: public, max-age=3600
Accept-Ranges: none
Content-Length: 1380
Via: 1.1 google
Vary: Accept-Encoding
Date: Thu, 23 May 2024 02:47:20 GMT
Clear-Site-Data: "*"
Expires: Thu, 23 May 2024 03:08:39 GMT
Age: 2321
ETag: W/"96d8671a40e5b38c01f24f21e8523bda"
Content-Type: text/html
X-Content-Type-Options: nosniff
Last-Modified: Thu, 09 May 2024 00:41:19 GMT
x-goog-stored-content-encoding: identity
Server: Google Frontend
Strict-Transport-Security: max-age=63072000
x-goog-generation: 1715215279532479
x-cloud-trace-context: 1198abd3b805dfde87f5bf0f25be8b55
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, clear
x-goog-meta-goog-reserved-file-mtime: 1715213586
x-goog-storage-class: STANDARD
x-guploader-uploadid: ABPtcPq8V_OqBAUwIxaSCSHK11F9xdmfJVYgA72WF7vpq8kHCwTvuHYEwfPDB18F-eoF4B1tqWI
x-goog-hash: crc32c=GcPUyA==, md5=lthnGkDls4wB8k8h6FI72g==
x-goog-stored-content-length: 4664
x-goog-metageneration: 1
x-cache: hit

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240523/b123783f/attachment-0001.htm>