<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>246508</bug_id>
          
          <creation_ts>2022-10-14 00:58:42 -0700</creation_ts>
          <short_desc>Implement Fetch Metadata Request Headers (aka Sec-Fetch-*)</short_desc>
          <delta_ts>2023-03-02 13:58:53 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>DOM</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=247696</see_also>
          <bug_file_loc>https://w3c.github.io/webappsec-fetch-metadata/</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          <dependson>204744</dependson>
    
    <dependson>237550</dependson>
    
    <dependson>238265</dependson>
    
    <dependson>253265</dependson>
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Anne van Kesteren">annevk</reporter>
          <assigned_to name="Patrick Griffis">pgriffis</assigned_to>
          <cc>pgriffis</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1905556</commentid>
    <comment_count>0</comment_count>
    <who name="Anne van Kesteren">annevk</who>
    <bug_when>2022-10-14 00:58:42 -0700</bug_when>
    <thetext>This is a tracking bug for the various dedicated Fetch Metadata bugs. Seems all headers apart from Sec-Fetch-Site and Sec-Fetch-User are covered thus far, but Sec-Fetch-Site has a patch.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1905557</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2022-10-14 00:58:54 -0700</bug_when>
    <thetext>&lt;rdar://problem/101162929&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1907312</commentid>
    <comment_count>2</comment_count>
    <who name="Patrick Griffis">pgriffis</who>
    <bug_when>2022-10-21 08:55:06 -0700</bug_when>
    <thetext>I don&apos;t plan on working on Sec-Fetch-User, at least for now. Discussing it with some people from Google they said that User wasn&apos;t very reliable nor the most important of them.

It should be doable in WebKit but it seemed less straightforward that Chromium which has more direct access to the browser UI layers to track user actions.

I&apos;d like to see the current work that is done at least move to be enabled as an experimental feature.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1910807</commentid>
    <comment_count>3</comment_count>
    <who name="Patrick Griffis">pgriffis</who>
    <bug_when>2022-11-07 09:51:49 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/6211</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1911053</commentid>
    <comment_count>4</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2022-11-08 11:44:53 -0800</bug_when>
    <thetext>Committed 256456@main (cb60df93ab8c): &lt;https://commits.webkit.org/256456@main&gt;

Reviewed commits have been landed. Closing PR #6211 and removing active labels.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1911204</commentid>
    <comment_count>5</comment_count>
    <who name="Anne van Kesteren">annevk</who>
    <bug_when>2022-11-09 02:14:47 -0800</bug_when>
    <thetext>Patrick, this wasn&apos;t meant to be the &quot;enable by default&quot; bug. Now we have nothing open to track the remaining WebSocket-related issue as well as Sec-Fetch-User. Could you file a new tracking bug perhaps as I guess we cannot reopen this one now it&apos;s associated with that PR?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1911354</commentid>
    <comment_count>6</comment_count>
    <who name="Patrick Griffis">pgriffis</who>
    <bug_when>2022-11-09 13:52:50 -0800</bug_when>
    <thetext>Sorry about that. I opened https://bugs.webkit.org/show_bug.cgi?id=247696</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>