<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>149551</bug_id>
          
          <creation_ts>2015-09-24 23:54:54 -0700</creation_ts>
          <short_desc>[SOUP] Slack.com is not working, new messages do not load due to WebSocket authentication failure issue</short_desc>
          <delta_ts>2020-09-26 06:52:17 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit2</component>
          <version>Other</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugzilla.redhat.com/show_bug.cgi?id=1265555</see_also>
    
    <see_also>https://bugzilla.gnome.org/show_bug.cgi?id=755508</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>0</everconfirmed>
          <reporter>javiermon</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>bochecha</cc>
    
    <cc>bugs-noreply</cc>
    
    <cc>cdumez</cc>
    
    <cc>cgarcia</cc>
    
    <cc>don.olmstead</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>guillaume.webkit</cc>
    
    <cc>japhet</cc>
    
    <cc>kapouer</cc>
    
    <cc>link</cc>
    
    <cc>mcatanzaro</cc>
    
    <cc>pgriffis</cc>
    
    <cc>pnormand</cc>
    
    <cc>scorpy_sk</cc>
    
    <cc>toyoshim</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>yutak</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1128672</commentid>
    <comment_count>0</comment_count>
    <who name="">javiermon</who>
    <bug_when>2015-09-24 23:54:54 -0700</bug_when>
    <thetext>Hi

This was originally reported here:
https://bugzilla.gnome.org/show_bug.cgi?id=755508

Slack.com is not working anymore with gnome&apos;s web browser (epiphany). I&apos;ve tested with the MiniBrowser and the bug is still there. Here&apos;s the relevant information of the webkitgtk4-devel package I used to test with minibrowser:
Name        : webkitgtk4-devel
Arch        : x86_64
Epoch       : 0
Version     : 2.10.0
Release     : 1.fc23


Thanks,</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1128674</commentid>
    <comment_count>1</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2015-09-25 00:02:02 -0700</bug_when>
    <thetext>It works for me, veeeeeery slow, though.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1128675</commentid>
    <comment_count>2</comment_count>
    <who name="">javiermon</who>
    <bug_when>2015-09-25 00:07:01 -0700</bug_when>
    <thetext>Hi

Have your tried logging in and loading channels, etc? 

In 2 of my machines the website shows a loading page and then it shows some parts but it doesn&apos;t load the channels/users/etc. Also, a yellow banner says reconnecting... but nothing else happens.

Thanks,</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1128677</commentid>
    <comment_count>3</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2015-09-25 00:53:04 -0700</bug_when>
    <thetext>No I haven&apos;t, all the information I had here is that slack.com was not working. I don&apos;t have an account to try it out.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1153384</commentid>
    <comment_count>4</comment_count>
    <who name="Štefan Gurský">scorpy_sk</who>
    <bug_when>2016-01-07 02:26:17 -0800</bug_when>
    <thetext>It works now in epiphany 3.18.2-1.fc23 with webkitgtk4 2.10.4</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1153399</commentid>
    <comment_count>5</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2016-01-07 06:17:01 -0800</bug_when>
    <thetext>(In reply to comment #4)
&gt; It works now in epiphany 3.18.2-1.fc23 with webkitgtk4 2.10.4

Nice when these things fix themselves....</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1211912</commentid>
    <comment_count>6</comment_count>
    <who name="Mathieu Bridon">bochecha</who>
    <bug_when>2016-07-17 23:57:18 -0700</bug_when>
    <thetext>This still happens for me with webkitgtk4-2.12.3-1.fc24.x86_64

(I tried with the MiniBrowser)

Carlos, since you don&apos;t have an account, what information could I give you to help fix this? :)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1211920</commentid>
    <comment_count>7</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2016-07-18 00:44:21 -0700</bug_when>
    <thetext>(In reply to comment #6)
&gt; This still happens for me with webkitgtk4-2.12.3-1.fc24.x86_64
&gt; 
&gt; (I tried with the MiniBrowser)
&gt; 
&gt; Carlos, since you don&apos;t have an account, what information could I give you
&gt; to help fix this? :)

Check if there are errors in the console with the inspector, for example.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1211942</commentid>
    <comment_count>8</comment_count>
      <attachid>283897</attachid>
    <who name="Mathieu Bridon">bochecha</who>
    <bug_when>2016-07-18 03:47:38 -0700</bug_when>
    <thetext>Created attachment 283897
Output in the WebKit console when loading a Slack channel

Here&apos;s a paste of what I see in the WebKit console when loading a slack team discussion page.

Sorry for the formatting, I just selected all text and then copy-pasted it. Let me know if there is a way to acquire this trace in a nicer manner.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1259749</commentid>
    <comment_count>9</comment_count>
    <who name="Mathieu Bridon">bochecha</who>
    <bug_when>2016-12-14 09:08:12 -0800</bug_when>
    <thetext>Anything else I can do to help get this fixed?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1259800</commentid>
    <comment_count>10</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2016-12-14 10:17:17 -0800</bug_when>
    <thetext>Asking the Slack developers to look at it would help. We&apos;re not going to debug their website for them.

This looks bad:

[Warning] Unhandled rejection _addBinding@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:11:15607 (rollup-core_required_libs.js, line 24)
_registerListener@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:11:15424
add@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:11:16071
onStart@https://h2.slack-edge.com/33e0d/js/rollup-client.js:4:30182
_callOnStarts@https://h2.slack-edge.com/4f1f/js/rollup-core_required_ts.js:2:7715
_onTemplatesLoaded@https://h2.slack-edge.com/4f1f/js/rollup-core_required_ts.js:2:7184
https://h2.slack-edge.com/4f1f/js/rollup-core_required_ts.js:2:4710
cancellationExecute@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:23:24553
_resolveFromExecutor@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:25:10810
Promise@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:25:2167
loadTemplates@https://h2.slack-edge.com/4f1f/js/rollup-core_required_ts.js:2:4538
_onDOMReady@https://h2.slack-edge.com/4f1f/js/rollup-core_required_ts.js:2:5511
fire@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:2:10822
fireWith@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:2:12106
ready@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:2:15007
completed@https://h2.slack-edge.com/3e1f/js/rollup-core_required_libs.js:2:15280

The log also shows some serious performance issues:

[Error] 2016/7/18 11:47:17.478  view.onStart() took 96.81ms, and that&apos;s WAY too long! Please make lazy any expensive DOM work etc you&apos;re doing
	_console (rollup-core_required_ts.js:1:9133)
	error (rollup-core_required_ts.js:1:3156)
	_callOnStarts (rollup-core_required_ts.js:2:7969)
	_onTemplatesLoaded (rollup-core_required_ts.js:2:7185)
	(anonymous function) (rollup-core_required_ts.js:2:4711)
	cancellationExecute (rollup-core_required_libs.js:23:24554)
	_resolveFromExecutor (rollup-core_required_libs.js:25:10811)
	Promise (rollup-core_required_libs.js:25:2168)
	loadTemplates (rollup-core_required_ts.js:2:4539)
	_onDOMReady (rollup-core_required_ts.js:2:5512)
	fire (rollup-core_required_libs.js:2:10823)
	fireWith (rollup-core_required_libs.js:2:12107)
	ready (rollup-core_required_libs.js:2:15008)
	completed (rollup-core_required_libs.js:2:15281)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1652551</commentid>
    <comment_count>11</comment_count>
    <who name="Guilaume Ayoub">guillaume.webkit</who>
    <bug_when>2020-05-14 02:12:00 -0700</bug_when>
    <thetext>Current version of Slack is still broken with recent versions of WebKitGTK: new messages are not automatically fetched and user statuses are not updated at all.

The JS error has changed and looks actually better:

&quot;fetchAuthAndReturnToUrl: too many auth fetches: 1589447178329,1589447180256,1589447182433; clearing auth fetch history and showing error&quot;

Is there anything I can do to help?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1652600</commentid>
    <comment_count>12</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2020-05-14 06:31:06 -0700</bug_when>
    <thetext>Ahhh, this has been really annoying since WebKit switched to Slack for communication. I was wondering why no other WebKitGTK devs seemed to have problems using Slack. Now I know... almost nobody else actually uses WebKit. ;)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1652607</commentid>
    <comment_count>13</comment_count>
    <who name="Jérémy Lal">kapouer</who>
    <bug_when>2020-05-14 06:44:51 -0700</bug_when>
    <thetext>I&apos;ve been using slack on epiphany for several years now.
Sometimes it needs a restart (hangs or high cpu load). Most of the time it&apos;s usable.
Right now on debian with epiphany 3.36.1, webkitgtk 2.28 (but it&apos;s been all right at least since 2.20).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1652611</commentid>
    <comment_count>14</comment_count>
    <who name="Guilaume Ayoub">guillaume.webkit</who>
    <bug_when>2020-05-14 06:55:37 -0700</bug_when>
    <thetext>(In reply to Jérémy Lal from comment #13)
&gt; I&apos;ve been using slack on epiphany for several years now.
&gt; Sometimes it needs a restart (hangs or high cpu load). Most of the time it&apos;s
&gt; usable.

It somehow works for me, but I wouldn’t say &quot;usable&quot;.

I’m on Epiphany 3.37.1 with WebKitGTK 2.28.2. I’ve only been trying to use Slack a month ago, and I had (and still have) these problems:

- New messages never arrive. The popup &quot;Last update x minutes ago&quot; is always displayed, I suppose that it should only appear when disconnected. The only way to get new messages is to reload the page.
- All the users (in the Direct Messages section) are offline, even when they appear as connected in other browsers.

Everything works fine on Firefox and Chrome on the same computer.

I can provide more information about my Epiphany and WebKitGTK configurations if needed.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1652627</commentid>
    <comment_count>15</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2020-05-14 08:15:43 -0700</bug_when>
    <thetext>(In reply to Guilaume Ayoub from comment #14)
&gt; - New messages never arrive. The popup &quot;Last update x minutes ago&quot; is always
&gt; displayed, I suppose that it should only appear when disconnected. The only
&gt; way to get new messages is to reload the page.

In my case, I can get new messages by clicking &quot;Last updated x minutes ago... Load new messages.&quot; Sometimes it actually seems to randomly work properly. But usually I have to click this button.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1652650</commentid>
    <comment_count>16</comment_count>
    <who name="Jérémy Lal">kapouer</who>
    <bug_when>2020-05-14 08:53:51 -0700</bug_when>
    <thetext>Using slack installed as a separate epiphany &quot;application&quot; it works all right here.
However the same url opened in a regular epiphany instance reproduces the &quot;fetchAuthAndReturnToUrl&quot; error.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1652658</commentid>
    <comment_count>17</comment_count>
    <who name="Guilaume Ayoub">guillaume.webkit</who>
    <bug_when>2020-05-14 09:06:59 -0700</bug_when>
    <thetext>(In reply to Michael Catanzaro from comment #15)
&gt; In my case, I can get new messages by clicking &quot;Last updated x minutes
&gt; ago... Load new messages.&quot; Sometimes it actually seems to randomly work
&gt; properly. But usually I have to click this button.

Clicking works for me too, but it’s kind of removing the &quot;instant&quot; part of &quot;instant messaging&quot; :).

I’ve never seen it work more than a dozen of seconds before getting the popup again.

(In reply to Jérémy Lal from comment #16)
&gt; Using slack installed as a separate epiphany &quot;application&quot; it works all
&gt; right here.
&gt; However the same url opened in a regular epiphany instance reproduces the
&gt; &quot;fetchAuthAndReturnToUrl&quot; error.

It doesn’t work for me in a separate Epiphany application :/. I’ve tried to change the application properties to be very permissive, it doesn’t fix the problem.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1652662</commentid>
    <comment_count>18</comment_count>
    <who name="Jérémy Lal">kapouer</who>
    <bug_when>2020-05-14 09:14:51 -0700</bug_when>
    <thetext>Odd, this is how the .desktop file is starting it:

epiphany --application-mode --profile=&quot;/home/dev/.local/share/epiphany-app.slack.com-xxxxxxxxxxx&quot; https://app.slack.com/client/aaaaa/bbbbbb</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1662693</commentid>
    <comment_count>19</comment_count>
    <who name="Link Dupont">link</who>
    <bug_when>2020-06-15 10:18:56 -0700</bug_when>
    <thetext>This recently started happening to me with Epiphany 3.36.2 and WebKitGTK 2.28.2. I noticed a couple suspicious lines in my console.

[Info] Jun-15 12:36:01.247 [SOCKET-MANAGER] (T024NJK6Z) received an error of type -1337: invalid_auth (gantry-shared.ade4760.min.js, line 1)
12:38 PM [Info] Jun-15 12:36:01.249 [SOCKET-MANAGER] (T024NJK6Z) Closing socket because #4106: received an &quot;error&quot; message from socket (gantry-shared.ade4760.min.js, line 1)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1663193</commentid>
    <comment_count>20</comment_count>
    <who name="Link Dupont">link</who>
    <bug_when>2020-06-16 12:12:11 -0700</bug_when>
    <thetext>So I could not rest knowing that this used to work, and decided to test it on another computer (my laptop). In browser mode, with an existing session, it works (the web socket maintains a connection and I do not see the &quot;Load new messages&quot; bubble). I decided to copy the epiphany settings from my laptop to my desktop. I created a tarball containing: ~/.config/epiphany, ~/.local/share/epiphany, and ~/.cache/epiphany. I copied the tarball over to my desktop, removed those directories from my desktop, and then unarchived the tarball. And that worked. Using browser mode, my slack workspace was able to connect.

I then went and created a web-app for app.slack.com. And it didn&apos;t work in that web-app. I concluded (thanks to bouncing ideas off of mcatanzaro), that the problem must exist in cookies, localstorage or IndexedDB. I opened up the cookies.sqlite on ~/.local/share/epiphany and in the slack web-app. They each contained 4 cookies with host = &apos;.slack.com&apos;, but had different values. I dumped the table from the browser mode, grabbed the 4 &quot;INSERT&quot; statements, deleted the cookies from the web-app, and ran the 4 INSERT statements on the web-app cookies.sqlite. Lo and behold, the web-app could now maintain a websocket!

WHAT this means, I have no idea, but it seems to point to one of the 4 cookies. I didn&apos;t test further to identify which of the 4 cookies might be causing it.

sqlite&gt; SELECT name, host, path FROM moz_cookies ;
d|.slack.com|/
lc|.slack.com|/
b|.slack.com|/

I appear to now have only 3 cookies. Originally, there was a fourth, named &quot;x&quot;.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1663228</commentid>
    <comment_count>21</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2020-06-16 14:06:38 -0700</bug_when>
    <thetext>Did you test cookie accept policy to see if, for example, allowing all cookies (instead of only first-party cookies) would work?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1663842</commentid>
    <comment_count>22</comment_count>
    <who name="Link Dupont">link</who>
    <bug_when>2020-06-18 02:36:52 -0700</bug_when>
    <thetext>(In reply to Michael Catanzaro from comment #21)
&gt; Did you test cookie accept policy to see if, for example, allowing all
&gt; cookies (instead of only first-party cookies) would work?

I just tried this. I removed my cookies.sqlite, then set the setting to allow all cookies. I was required to log in again, and when I did, the &quot;Load new messages&quot; bubble was back.

Restoring my old cookies restored websocket functionality.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691485</commentid>
    <comment_count>23</comment_count>
    <who name="Philippe Normand">pnormand</who>
    <bug_when>2020-09-24 06:16:35 -0700</bug_when>
    <thetext>When this happens the wssbackup.slack.com and wssprimary.slack.com keep returning the same error:

Data	Time
WebSocket Connection Established	1600953198.645637
{&quot;type&quot;:&quot;error&quot;,&quot;error&quot;:{&quot;code&quot;:-1337,&quot;msg&quot;:&quot;invalid_auth&quot;}} 1600953198.885279
	

Perhaps the involved auth cookies silently expire and are not renewed until the user clicks on the &quot;load new messages&quot; link though? Just wild-guessing here...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691491</commentid>
    <comment_count>24</comment_count>
    <who name="Link Dupont">link</who>
    <bug_when>2020-09-24 06:42:25 -0700</bug_when>
    <thetext>(In reply to Philippe Normand from comment #23)
&gt; 
&gt; Perhaps the involved auth cookies silently expire and are not renewed until
&gt; the user clicks on the &quot;load new messages&quot; link though? Just wild-guessing
&gt; here...

There&apos;s something else happening though. Clicking on the &quot;load new messages&quot; link doesn&apos;t bring back the old behaviour of receiving new messages automatically though. Clicking it loads new messages, and then you get no new messages until you click it again.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691492</commentid>
    <comment_count>25</comment_count>
    <who name="Philippe Normand">pnormand</who>
    <bug_when>2020-09-24 06:44:29 -0700</bug_when>
    <thetext>Exactly, one you&apos;re into this issue, you&apos;re in forever :)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691867</commentid>
    <comment_count>26</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2020-09-25 06:59:13 -0700</bug_when>
    <thetext>I&apos;ve found the problem, but not the solution yet, maybe Patrick can help. The problem is that we are not including all the cookies in the web socket request. There are two cookies with the Lax same-site policy set, that are not included for the websocket request because it&apos;s not considered a top site navigation and the hosts don&apos;t match (app.slack.com - wss-primary.slack.com). I don&apos;t know how same-site cookies work, so I don&apos;t know if we need to make an exception for websockets or consider them a top site navigation. Maybe it&apos;s a WebKit bug that should mark the websocket request as same site? Patrick?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691896</commentid>
    <comment_count>27</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2020-09-25 08:39:39 -0700</bug_when>
    <thetext>I don&apos;t think WebSockets should be treated as a top site navigation. That doesn&apos;t sound right.

(In reply to Carlos Garcia Campos from comment #26)
&gt; Maybe it&apos;s a WebKit bug that should mark the websocket request as same site?

app.slack.com and wss-primary.slack.com have the same registrable domain (top privately-controlled domain), slack.com, so they should be treated as the same site for purposes of cookie policy. That is, wss-primary.slack.com should be allowed to receive cookies even if the request is SameSite=Lax or SameSite=Strict.

The cookie&apos;s Domain attribute of course has to match for the cookie to be sent in the request. In this case, Domain is set to .slack.com, so it does.

libsoup used to be stricter than any browser in using the full domain rather than registrable domain, but that was not web-compatible, so I changed it: https://gitlab.gnome.org/GNOME/libsoup/-/commit/d5952f2ff3a89e8ed19826ca3ace72078b9b1ed6. WebKit should match that behavior.

There&apos;s a complicated draft spec for this here: https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-03#section-5.2</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691898</commentid>
    <comment_count>28</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2020-09-25 08:42:11 -0700</bug_when>
    <thetext>(In reply to Michael Catanzaro from comment #27)
&gt; In this case, Domain is set to .slack.com, so it does.

(That means the cookie should be sent to every subdomain of slack.com. The leading dot is ignored.)

And Path has to match too, but here the Path is /, so it should be sent regardless of path.

So all signs point to this being our bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691899</commentid>
    <comment_count>29</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2020-09-25 08:50:28 -0700</bug_when>
    <thetext>I suspect cookie_is_valid_for_same_site_policy() in soup-cookie-jar.c, it does this:

return soup_host_matches_host (soup_uri_get_host (cookie_uri ? cookie_uri : top_level), soup_uri_get_host (uri));

with no calls to soup_tld_get_base_domain(). That looks wrong. In contrast, incoming_cookie_is_third_party() uses soup_tld_get_base_domain() before comparing domains.

That could return too many cookies, but the purpose of that function is only to check Same-Site policy, and there is other logic in get_cookies() to ensure Domain matches, so I think it should be safe to change.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691900</commentid>
    <comment_count>30</comment_count>
      <attachid>409698</attachid>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2020-09-25 09:00:19 -0700</bug_when>
    <thetext>Created attachment 409698
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1691908</commentid>
    <comment_count>31</comment_count>
      <attachid>409698</attachid>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2020-09-25 09:20:17 -0700</bug_when>
    <thetext>Comment on attachment 409698
Patch

Well... surprise. Any idea why this isn&apos;t broken for Safari?

Looking for other suspicious cases,there are a lot of places where we call setFirstPartyForCookies but not addSameSiteInfoToRequestIfNeeded: WebKitWebSourceGStreamer.cpp, SWServer.cpp, XSLTProcessor.cpp, NetworkCacheSpeculativeLoadManager.cpp, NetworkDataTaskCocoa.mm, NetworkDataTaskSoup.cpp, and WebProcessPool.cpp. I wonder how many of these are similar bugs and how many are covered by FrameLoader?

I also wonder why cookie_is_valid_for_same_site_policy() isn&apos;t causing this problem? We probably still need to look closer at that....</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1692164</commentid>
    <comment_count>32</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2020-09-26 00:39:25 -0700</bug_when>
    <thetext>(In reply to Michael Catanzaro from comment #31)
&gt; Comment on attachment 409698 [details]
&gt; Patch
&gt; 
&gt; Well... surprise. Any idea why this isn&apos;t broken for Safari?

Yes, I guess safari doesn&apos;t use the new websockets yet. In WebKit websockets implementation the request already includes the right cookies. See WebSocketHandshake::clientHandshakeRequest(). That includes the cookies using the given cookieRequestHeaderFieldValue function that ends up in CookieJar::cookieRequestHeaderFieldValue(Document&amp; document, const URL&amp; url) that does the right thing for same site cookies.

&gt; Looking for other suspicious cases,there are a lot of places where we call
&gt; setFirstPartyForCookies but not addSameSiteInfoToRequestIfNeeded:
&gt; WebKitWebSourceGStreamer.cpp, SWServer.cpp, XSLTProcessor.cpp,
&gt; NetworkCacheSpeculativeLoadManager.cpp, NetworkDataTaskCocoa.mm,
&gt; NetworkDataTaskSoup.cpp, and WebProcessPool.cpp. I wonder how many of these
&gt; are similar bugs and how many are covered by FrameLoader?

I haven&apos;t looked in detail, but I think we are sometimes calling setFirstPartyForCookies more than once for the same request.

&gt; I also wonder why cookie_is_valid_for_same_site_policy() isn&apos;t causing this
&gt; problem? We probably still need to look closer at that....

cookie_is_valid_for_same_site_policy does the right thing when it receives a site for cookies, in this case it receives the document url instead of the websocket one, and the hosts match.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1692180</commentid>
    <comment_count>33</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2020-09-26 06:51:43 -0700</bug_when>
    <thetext>Committed r267620: &lt;https://trac.webkit.org/changeset/267620&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1692181</commentid>
    <comment_count>34</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2020-09-26 06:52:17 -0700</bug_when>
    <thetext>&lt;rdar://problem/69623648&gt;</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>283897</attachid>
            <date>2016-07-18 03:47:38 -0700</date>
            <delta_ts>2016-07-18 03:47:38 -0700</delta_ts>
            <desc>Output in the WebKit console when loading a Slack channel</desc>
            <filename>webit-console-slack.txt</filename>
            <type>text/plain</type>
            <size>21919</size>
            <attacher name="Mathieu Bridon">bochecha</attacher>
            
              <data encoding="base64">W1dhcm5pbmddIEludmFsaWQgQ1NTIHByb3BlcnR5IGRlY2xhcmF0aW9uIGF0OiAqIChyb2xsdXAt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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>409698</attachid>
            <date>2020-09-25 09:00:19 -0700</date>
            <delta_ts>2020-09-25 09:20:17 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>wk2-websockets-same-site.diff</filename>
            <type>text/plain</type>
            <size>2004</size>
            <attacher name="Carlos Garcia Campos">cgarcia</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZyBiL1NvdXJjZS9XZWJDb3JlL0No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</data>
<flag name="review"
          id="425482"
          type_id="1"
          status="+"
          setter="mcatanzaro"
    />
          </attachment>
      

    </bug>

</bugzilla>