[Webkit-unassigned] [Bug 271700] REGRESSION (Safari 17): Infinite reloading iframes on MDN and other websites, when using a combination of lazy loading, Cache-Control and Clear-Site-Data

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=271700

--- Comment #20 from Chris Dumez <cdumez at apple.com> ---
(In reply to Chris Dumez from comment #19)
> As far as I can tell, we're doing what the website is asking us to?
> 
> The website has several frames (or the same origin) which serve the
> `Clear-Site-Data: *` HTTP header. As per the specification, '*' includes
> 'executionContexts`, which asks the user agent to reload all frames from
> this origin.
> 
> So you have frame A and frame B from the same origin, they each serve
> `Clear-Site-Data: *` HTTP header, causing each other to get reloaded. Upon
> reload, they serve the exact same header, rinse and repeat.
> 
> I'm looking at the specification but it's not clear to me yet what we're
> supposed to do to avoid infinite reloads in this case.

According to MDN, Safari is the only browser supporting "executionContexts" for Clear-Site-Data, which would explain why it wouldn't impact other browsers.

I suggest we unship support for "executionContexts" given how risky it is currently.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20241025/d86d35d3/attachment.htm>