<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>184148</bug_id>
          
          <creation_ts>2018-03-29 13:14:52 -0700</creation_ts>
          <short_desc>Do CORS check in the network process</short_desc>
          <delta_ts>2018-04-20 13:21:44 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>Page Loading</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>184240</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Ryosuke Niwa">rniwa</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>beidson</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>youennf</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1410359</commentid>
    <comment_count>0</comment_count>
    <who name="Ryosuke Niwa">rniwa</who>
    <bug_when>2018-03-29 13:14:52 -0700</bug_when>
    <thetext>We need to do the CORS checks in the network process.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1410360</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2018-03-29 13:15:16 -0700</bug_when>
    <thetext>&lt;rdar://problem/39010987&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1416389</commentid>
    <comment_count>2</comment_count>
    <who name="youenn fablet">youennf</who>
    <bug_when>2018-04-20 13:21:44 -0700</bug_when>
    <thetext>Marking as duplicate of https://bugs.webkit.org/show_bug.cgi?id=184240.
We now have the ability to do all CORS checks (as well as CSP and content blockers) in NetworkProcess.
This is demonstrated for synchronous XHR and beacon.
We now need to activate these CORS checks for other load types (async XHR, fetch, images...).
This will be handled in other bugzilla entries.

*** This bug has been marked as a duplicate of bug 184240 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>