225146 2021-04-28 02:34:51 -0700 onerror event not triggered when origin uses TLS 1.0/1.1 2021-05-05 02:35:13 -0700 1 1 1 Unclassified WebKit Images Safari 14 All All NEW InRadar P2 Normal --- 1 toomas2d webkit-unassigned achristensen ap jean-yves.avenard sabouhallawa simon.fraser webkit-bug-importer oldest_to_newest 1754970 0 427248 toomas2d 2021-04-28 02:34:51 -0700 Created attachment 427248 Simple script that demonstrates the issue When you try to load an image from the origin which uses an obsolete version of the TLS (1.0 and 1.1) image will not be loaded and thus `onerror` event should be fired. It does not happen. I am attaching a simple script that demonstrates this issue. The problem also persists in Safari 13. 1755516 1 ap 2021-04-29 13:37:35 -0700 Weird. I can reproduce. 1755619 2 achristensen 2021-04-29 20:22:26 -0700 Very strange. This is probably related to r265835 which Safari hits in this case. It's especially strange because we are getting a NSURLErrorCancelled after cancelling the authentication challenge. Needs more investigation. We should probably fix it, but there is a straightforward workaround: use TLS 1.2 or 1.3 1756874 3 webkit-bug-importer 2021-05-05 02:35:13 -0700 <rdar://problem/77548636> 427248 2021-04-28 02:34:51 -0700 2021-04-28 02:34:51 -0700 Simple script that demonstrates the issue image-event-tls-bug.html text/html 1125 toomas2d PCFET0NUWVBFIGh0bWw+CjxodG1sPgogIDxoZWFkPkJ1ZyAvIEltYWdlIGhhbmRsaW5nLCBvYnNv bGV0ZSBUTFM8L2hlYWQ+CgogIDxib2R5PgogICAgPHA+SSBhbSB0cnlpbmcgdG8gbG9hZCBhbiBp bWFnZS4uLi48L3A+CgogICAgPHNjcmlwdD4KICAgICAgZnVuY3Rpb24gbG9hZEltYWdlKHNyYykg ewogICAgICAgIGNvbnN0IGltZyA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoImltZyIpOwogICAg ICAgIGxldCB0aW1lb3V0SWQgPSBzZXRUaW1lb3V0KCgpID0+IHsKICAgICAgICAgIGNvbnN0IHAg PSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCJwIik7CiAgICAgICAgICBwLmlubmVyVGV4dCA9ICJU aW1lb3V0ISBObyBldmVudCB0cmlnZ2VyZWQhIjsKICAgICAgICAgIGRvY3VtZW50LmJvZHkuYXBw ZW5kQ2hpbGQocCk7CiAgICAgICAgfSwgNTAwMCk7CgogICAgICAgIGltZy5vbmxvYWQgPSAoZSkg PT4gewogICAgICAgICAgY29uc3QgcCA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoInAiKTsKICAg ICAgICAgIHAuaW5uZXJUZXh0ID0gIkltYWdlIGxvYWRlZCI7CiAgICAgICAgICBkb2N1bWVudC5i b2R5LmFwcGVuZENoaWxkKHApOwoKICAgICAgICAgIGNsZWFyVGltZW91dCh0aW1lb3V0SWQpOwog ICAgICAgIH07CiAgICAgICAgaW1nLm9uZXJyb3IgPSAoZSkgPT4gewogICAgICAgICAgY29uc3Qg cCA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoInAiKTsKICAgICAgICAgIHAuaW5uZXJUZXh0ID0g IkVycm9yIGR1cmluZyBsb2FkaW5nIGltYWdlLiBMb29rIGF0IHRoZSBjb25zb2xlLiI7CiAgICAg ICAgICBkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKHApOwoKICAgICAgICAgIGNsZWFyVGltZW91 dCh0aW1lb3V0SWQpOwogICAgICAgICAgY29uc29sZS5lcnJvcihlKTsKICAgICAgICB9OwoKICAg ICAgICBpbWcuc3JjID0gc3JjOwoKICAgICAgICBkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGlt Zyk7CiAgICAgIH0KCiAgICAgIGxvYWRJbWFnZSgiaHR0cHM6Ly90bHMtdjEtMC5iYWRzc2wuY29t OjEwMTEvIik7CiAgICAgIC8vIGxvYWRJbWFnZSgiaHR0cHM6Ly90bHMtdjEtMS5iYWRzc2wuY29t OjEwMTEvIik7CiAgICA8L3NjcmlwdD4KICA8L2JvZHk+CjwvaHRtbD4K