233559 2021-11-29 07:48:20 -0800 Cache issue with crossorigin, 'vary: *' Responses 2021-12-06 07:49:20 -0800 1 1 1 Unclassified WebKit Service Workers Safari 15 Unspecified Unspecified NEW InRadar P2 Normal --- 1 lion.ralfs+webkitbugzilla webkit-unassigned achristensen koivisto webkit-bug-importer youennf oldest_to_newest 1818212 0 lion.ralfs+webkitbugzilla 2021-11-29 07:48:20 -0800 When attempting to add requests to the cache via the CacheStorage API (https://developer.mozilla.org/en-US/docs/Web/API/CacheStorage), any request that results in a response with the response header 'vary: *' causes the operation to fail with an error: "TypeError: Response has a '*' Vary header value" I'm assuming that this is the expected behavior. However, when adding a _crossorigin_ request with a 'vary: *' header, no error is thrown. Instead, Safari adds the cache entry without replacing previous entries with the same URL. This becomes evident by repeatedly reloading a page that attempts to add a crossorigin, 'vary: *' request to the cache. If one reads the cache after a few page-reloads (via `cache.matchAll` for example), the same response is returned multiple times. I've isolated a test case in this repository: https://github.com/lionralfs/caches-vary-crossorigin-behavior 1. Run `npm install` 2. Run `npm start` 3. Visit localhost:8000 in Safari 4. Reload the page a few times 5. Click the button to read the cache which displays the cache entries 6. Take a look at the index.html for details To be honest, I'm not entirely sure what the expected behavior is for crossorigin + 'vary: *' responses and I've file a Chrome bug as well (since they have a similar issue): https://bugs.chromium.org/p/chromium/issues/detail?id=1274098 1820611 1 webkit-bug-importer 2021-12-06 07:49:20 -0800 <rdar://problem/86103155>