319985 2026-07-22 07:36:18 -0700 REGRESSION (Safari/iOS 26.5.x): XHR/fetch send an empty request body (Content-Length: 0) for a disk-backed File when the page is controlled by a service worker 2026-08-25 02:49:33 -0700 1 1 1 Unclassified WebKit Page Loading Safari 26 iPhone / iPad iOS 26 NEW InRadar P2 Major --- 1 junek.pavel.pj pvollan basuke beidson christian pvollan rupin tobias vita5.dev webkit-bug-importer youennf oldest_to_newest 2232786 0 480716 junek.pavel.pj 2026-07-22 07:36:18 -0700 Created attachment 480716 minimal reproduction html Since Safari/iOS 26.5.x, sending a `File` object obtained from `<input type="file">` as a request body results in an **empty body with `Content-Length: 0`** reaching the server. The browser computes the Content-Length itself, so this is not a transport truncation, the WebKit fails to read the disk-backed blob while serializing the request and silently substitutes an empty payload. Key observations: 1. `XMLHttpRequest.send(file)` → server receives 0 bytes, request header `Content-Length: 0` 2. `fetch(url, { method: 'PUT', body: file })` → identical result (**not** XHR-specific) 3. `await file.arrayBuffer()` in the page **works** and returns all bytes (1,689,238 B in our test) 4. Sending an in-memory copy — `new Blob([await file.arrayBuffer()], { type: file.type })` — **works**; the server receives the complete body 5. `file.size` reports the correct value throughout 6. No redirect, no CORS preflight, no service-worker `respondWith` is involved in the failing request (same-origin PUT, verified via HAR: the PUT goes straight to the endpoint and gets the app's 422 size-mismatch response) So only the network-process side of blob resolution appears broken; page-process reads are fine. Environment: - iPhone 15 Pro Max & iPad Air (2022), iOS 26.5.2 (23F84), Safari (UA token `Version/26.5.2`) - Also reproduced by end users on macOS Safari 26.5 (shared WebKit) - Files picked from both the iOS photo picker (JPEG, ~1.7 MB and ~3.3 MB) and the Files app (PDF, 17 kB and 97 kB) — file type and size do not matter - **Regression:** the same flow worked on the previous iOS version installed on the same devices (confirmed via update A/B test by two independent users); first user reports began shortly after the 26.5 rollout Steps to reproduce: 1. Open the attached `repro.html` on an https origin in Safari on iOS 26.5.x 2. Pick any file via the file input (a photo from the library or a PDF from Files) 3. Read the on-page log: it PUTs the picked File via XHR and via fetch to https://httpbin.org/put (CORS-enabled echo) and prints the Content-Length the server received, then repeats the XHR PUT with an in-memory copy of the same bytes Expected results: All three uploads report the server receiving `Content-Length` equal to `file.size`. Actual results: - XHR with the picked File: server receives `Content-Length: 0` - fetch with the picked File: server receives `Content-Length: 0` - `file.arrayBuffer()`: reads all bytes successfully - XHR with the in-memory Blob copy: server receives the full body 2232807 1 junek.pavel.pj 2026-07-22 08:36:10 -0700 Update: the bug requires a service-worker-controlled page. The service worker does not intercept the failing requests, its fetch listener never calls event.respondWith(). The controlled state alone triggers the bug. Affects both XMLHttpRequest and fetch. file.arrayBuffer() in the page reads the full file regardless, and sending new Blob([await file.arrayBuffer()]) works even under SW control, only network-process serialization of the disk-backed blob fails. I've replaced the original single-file test case with a two-file reproduction (repro.html + sw.js, attached). Steps: host both files in the same directory over https, open repro.html (the page registers sw.js and becomes controlled via clients.claim()), pick any file — steps 1–2 report the server receiving Content-Length: 0. Click "Switch to B side" (unregisters the SW) and repeat — everything passes. Real-world impact: file uploads are broken in Safari 26.5.x for any web app using a service worker (e.g. Angular ngsw apps; the symptom also matches upload failures reported on github.com in Safari 26). 2232808 2 480717 junek.pavel.pj 2026-07-22 08:37:02 -0700 Created attachment 480717 reproduction 2232809 3 480718 junek.pavel.pj 2026-07-22 08:37:43 -0700 Created attachment 480718 reproduction.html 2233428 4 webkit-bug-importer 2026-07-23 16:15:16 -0700 <rdar://problem/183071407> 2234409 5 pvollan 2026-07-27 09:30:25 -0700 I am not able to reproduce with WebKit ToT on macOS. Is this an issue on macOS as well? 2234413 6 junek.pavel.pj 2026-07-27 09:46:17 -0700 Few users reported us that the problem is on macOS as well, but most reports are from iOS. I was unable to replicate it myself on the macOS, only on the iOS. 2234414 7 pvollan 2026-07-27 09:49:03 -0700 This is the output I am seeing when testing WebKit ToT on macOS. The test case is hosted locally over http. === run start === page controlled by SW: YES picked: test2.txt, size=5, type=text/plain 0) control GET: HTTP 200 — echo reachable 1) XHR disk-backed File: server received Content-Length=5; upload progress 5/5 2) fetch disk-backed File: server received Content-Length=5 3) file.arrayBuffer() read 5 bytes in-page 4) XHR in-memory Blob copy: server received Content-Length=5; upload progress 5/5 2234603 8 pvollan 2026-07-27 16:04:56 -0700 So far, I am not able to reproduce on iOS, either. 2234808 9 pvollan 2026-07-28 06:29:08 -0700 This was tested on iOS 26.6. 2236816 10 ap 2026-08-03 15:20:55 -0700 Should we track this as a dupe of bug 319396, or is this separate? 2236970 11 junek.pavel.pj 2026-08-03 23:35:04 -0700 Hey, I believe the described problem is exactly the same as the one I reported in this case. I did not have time to provide better reproduction files yet, but I was able to replicate the problem with those already attached. It is possible that my original assumption was wrong and the root cause isn't related to the service worker, but caused by the problems described in the bug you mentioned. 2239024 12 pvollan 2026-08-10 13:41:31 -0700 *** Bug 319396 has been marked as a duplicate of this bug. *** 2240325 13 junek.pavel.pj 2026-08-14 06:34:12 -0700 Hello. As of today, users of our application faced this error on all latest iOS Safari versions. Based on the User-Agent header, we have confirmed incidents from iOS 26.6 and iOS 27. All reports have "AppleWebKit/605.1.15" as part of the User-Agent header. 2241095 14 pvollan 2026-08-17 14:07:18 -0700 Hi! Unfortunately, I am still not able to reproduce with the attached test case. Could you also file a feedback report? This will provide us with more detailed information. === run start === page controlled by SW: YES picked: test.txt, size=5, type=text/plain 0) control GET: HTTP 200 — echo reachable 1) XHR disk-backed File: server received Content-Length=5; upload progress 5/5 2) fetch disk-backed File: server received Content-Length=5 3) file.arrayBuffer() read 5 bytes in-page 4) XHR in-memory Blob copy: server received Content-Length=5; upload progress 5/5 2241797 15 481111 tobias 2026-08-19 08:16:35 -0700 Created attachment 481111 Reproduction example for loading from IndexedDB Hi, I have encountered what I believe to be a related bug. When saving a File instance to IndexedDB, loading it from IndexedDB and then sending that File Blob via FormData using fetch, no actual data is sent (Content-Length is 0) and the server encounters an unexpected EOF. It only happens with File objects not Blob objects in my reproduction example. I included a checkbox to test both cases. I have prefilled httpbun.com as a target server in the reproduction example, but any http server can probably be used. In my case it is not related to Service Workers and can be served from any http context. The bug could not be reproduced on macOS Tahoe 26.3.1 Noticed bug first on iOS and tested again on iPad (26.6) Steps to reproduce: 1. Serve html file on a server accessible to the iOS device 2. Access served html file on testing device 3. Press run button Expected behavior: In all 3 test cases that are run, the file should be sent to the server Actual behavior: In the second test case (loaded from IndexedDB) the Content-Length is 0 and no further data is sent. Server might respond with a 400 error (EOF). 2241817 16 tobias 2026-08-19 09:29:08 -0700 After updating to macOS 26.6.2 I can confirm that the bug is now reproducible in macOS Safari as well. I also just realized that the tests can be run directly by opening the attachment link in the browser and clicking on the run button. No need to host separately. 2243437 17 vita5.dev 2026-08-25 02:49:33 -0700 Adding a data point that may help, since reproduction has been the blocker here: on an affected device the failure coincides exactly with a **sandbox denial in the networking process**, and I have a clean negative control for it. **Setup.** A Meteor web app whose page is service-worker-controlled, uploading a photo picked from the Photo Library via `multipart/form-data` (XHR) to a third-party storage API. Device: **iPhone 12, iOS 26.6**, Safari, rented from AWS Device Farm. Two builds of the same app, in one 19-minute session, same device, same photo: - **Build A (unfixed):** sends the picked `File` directly. Upload arrives at the server with an empty body. - **Build B (fixed):** sends `new Blob([await file.arrayBuffer()], {type})` instead — the workaround from comment #0. Build A failed both times it was tried; Build B succeeded both times. **The device log shows why.** Across 18,339 log entries for the session there are **exactly two** `file-issue-extension` denials, and they fall on the two Build A failures: ``` 16:13:47 Sandbox: com.apple.WebKit.Networking(609) deny(1) file-issue-extension target:/private/var/mobile/Containers/Data/Application/<UUID>/tmp/WKFileUploadPanel-JwERDyET/IMG_0001.jpeg extension-class:com.apple.app-sandbox.read 16:22:20 Sandbox: com.apple.WebKit.Networking(609) deny(1) file-issue-extension target:/private/var/mobile/Containers/Data/Application/<UUID>/tmp/WKFileUploadPanel-WqkWHVtW/IMG_0001.jpeg extension-class:com.apple.app-sandbox.read ``` There is **no such denial** at the two Build B successes. Timeline: | Time | Build | Result | `file-issue-extension` denial | | :------: | :---------: | :------------: | :---------------------------: | | 16:13:47 | A (unfixed) | **empty body** | **yes** | | 16:16 | B (fixed) | success | no | | 16:19 | B (fixed) | success | no | | 16:22:20 | A (unfixed) | **empty body** | **yes** | The target is the file being uploaded, staged in WebKit's own `WKFileUploadPanel` temporary directory, and the extension class is `com.apple.app-sandbox.read`. Read literally: **the networking process is refused read access to the file it is being asked to send**, which would produce exactly the observed `Content-Length: 0`. It also explains why the in-memory `Blob` workaround is effective — the bytes are read in the WebContent process, which does have access, so the networking process never needs a file extension at all. **Caveats, stated honestly:** - n=2 failures and n=2 successes. Perfect correlation, small sample. - The device is a **rented, supervised/managed device** in a device farm. Its sandbox profile may not be representative of a consumer device, and I cannot rule out that the denial is likelier there. That said, the fail/pass correlation is *within the same device and session*, so it does not depend on the device being typical. - I have not proven causation — only that the denial appears on the failures and not the successes, and that it names the right file at the right moment. - My log shows no service-worker involvement in the failing request itself, consistent with comment #1 (controlled state alone). Happy to provide the full session log if useful. I do not have a `sysdiagnose` — the device was rented by the minute and the session has ended — but if a sandbox-profile difference around `file-issue-extension` for `WKFileUploadPanel` paths is a plausible lead, that may be checkable in the source without a reproduction. 480716 2026-07-22 07:36:18 -0700 2026-07-22 08:36:30 -0700 minimal reproduction html repro.html text/html 1164 junek.pavel.pj PCFET0NUWVBFIGh0bWw+CjxodG1sPgo8Ym9keT4KPGlucHV0IHR5cGU9ImZpbGUiIGlkPSJmIj4K PHByZSBpZD0ib3V0Ij48L3ByZT4KPHNjcmlwdD4KY29uc3Qgb3V0ID0gbSA9PiBkb2N1bWVudC5n ZXRFbGVtZW50QnlJZCgnb3V0JykudGV4dENvbnRlbnQgKz0gbSArICdcbic7CmNvbnN0IEVDSE8g PSAnaHR0cHM6Ly9odHRwYmluLm9yZy9wdXQnOwpjb25zdCB4aHJQdXQgPSBib2R5ID0+IG5ldyBQ cm9taXNlKHJlcyA9PiB7CiAgY29uc3QgeCA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOwogIHgub3Bl bignUFVUJywgRUNITyk7CiAgeC5vbmxvYWQgPSAoKSA9PiByZXMoJ3NlcnZlciByZWNlaXZlZCBD b250ZW50LUxlbmd0aD0nICsgSlNPTi5wYXJzZSh4LnJlc3BvbnNlKS5oZWFkZXJzWydDb250ZW50 LUxlbmd0aCddKTsKICB4Lm9uZXJyb3IgPSAoKSA9PiByZXMoJ25ldHdvcmsgZXJyb3InKTsKICB4 LnNlbmQoYm9keSk7Cn0pOwpkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnZicpLm9uY2hhbmdlID0g YXN5bmMgZXYgPT4gewogIGNvbnN0IGZpbGUgPSBldi50YXJnZXQuZmlsZXNbMF07CiAgb3V0KGBw aWNrZWQ6ICR7ZmlsZS5uYW1lfSwgc2l6ZT0ke2ZpbGUuc2l6ZX0sIHR5cGU9JHtmaWxlLnR5cGV9 YCk7CiAgb3V0KCcxKSBYSFIgZGlzay1iYWNrZWQgRmlsZTogJyArIGF3YWl0IHhoclB1dChmaWxl KSk7CiAgdHJ5IHsKICAgIGNvbnN0IHIgPSBhd2FpdCBmZXRjaChFQ0hPLCB7IG1ldGhvZDogJ1BV VCcsIGJvZHk6IGZpbGUgfSk7CiAgICBvdXQoJzIpIGZldGNoIGRpc2stYmFja2VkIEZpbGU6IHNl cnZlciByZWNlaXZlZCBDb250ZW50LUxlbmd0aD0nICsgKGF3YWl0IHIuanNvbigpKS5oZWFkZXJz WydDb250ZW50LUxlbmd0aCddKTsKICB9IGNhdGNoIChlKSB7IG91dCgnMikgZmV0Y2ggZGlzay1i YWNrZWQgRmlsZTogJyArIGUpOyB9CiAgY29uc3QgYnVmID0gYXdhaXQgZmlsZS5hcnJheUJ1ZmZl cigpOwogIG91dChgMykgZmlsZS5hcnJheUJ1ZmZlcigpIHJlYWQgJHtidWYuYnl0ZUxlbmd0aH0g Ynl0ZXMgaW4tcGFnZWApOwogIG91dCgnNCkgWEhSIGluLW1lbW9yeSBCbG9iIGNvcHk6ICcgKyBh d2FpdCB4aHJQdXQobmV3IEJsb2IoW2J1Zl0sIHsgdHlwZTogZmlsZS50eXBlIH0pKSk7Cn07Cjwv c2NyaXB0Pgo8L2JvZHk+CjwvaHRtbD4K 480717 2026-07-22 08:37:02 -0700 2026-07-22 08:37:02 -0700 reproduction sw.js text/javascript 391 junek.pavel.pj Ly8gTWluaW1hbCBwYXNzLXRocm91Z2ggc2VydmljZSB3b3JrZXIuCi8vIE5vdGU6IHRoZSBmZXRj aCBsaXN0ZW5lciBpcyBpbnRlbnRpb25hbGx5IHByZXNlbnQgYnV0IE5FVkVSIGNhbGxzIGV2ZW50 LnJlc3BvbmRXaXRoKCksCi8vIG1pcnJvcmluZyBob3cgdGhlIEFuZ3VsYXIgc2VydmljZSB3b3Jr ZXIgKG5nc3cpIHRyZWF0cyBub24tR0VUIHJlcXVlc3RzLgpzZWxmLmFkZEV2ZW50TGlzdGVuZXIo J2luc3RhbGwnLCAoKSA9PiBzZWxmLnNraXBXYWl0aW5nKCkpOwpzZWxmLmFkZEV2ZW50TGlzdGVu ZXIoJ2FjdGl2YXRlJywgZXZlbnQgPT4gZXZlbnQud2FpdFVudGlsKHNlbGYuY2xpZW50cy5jbGFp bSgpKSk7CnNlbGYuYWRkRXZlbnRMaXN0ZW5lcignZmV0Y2gnLCAoKSA9PiB7fSk7Cg== 480718 2026-07-22 08:37:43 -0700 2026-07-22 08:38:05 -0700 reproduction.html repro.html text/html 3108 junek.pavel.pj PCFET0NUWVBFIGh0bWw+CjxodG1sPgo8Ym9keT4KPGRpdiBpZD0ic3ctc3RhdHVzIj5jaGVja2lu ZyBzZXJ2aWNlIHdvcmtlcuKApjwvZGl2Pgo8YnV0dG9uIGlkPSJ0b2dnbGUiPuKApjwvYnV0dG9u Pgo8aHI+CjxpbnB1dCB0eXBlPSJmaWxlIiBpZD0iZiI+CjxwcmUgaWQ9Im91dCI+PC9wcmU+Cjxz Y3JpcHQ+CmNvbnN0IG91dCA9IG0gPT4gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ291dCcpLnRl eHRDb250ZW50ICs9IG0gKyAnXG4nOwpjb25zdCBFQ0hPID0gJ2h0dHBzOi8vaHR0cGJpbi5vcmcn OyAvLyBpZiB1bnJlYWNoYWJsZSBmcm9tIHlvdXIgbmV0d29yaywgdXNlICdodHRwczovL3Bvc3Rt YW4tZWNoby5jb20nCmNvbnN0IGNsID0gaCA9PiAoaCAmJiAoaFsnQ29udGVudC1MZW5ndGgnXSA/ PyBoWydjb250ZW50LWxlbmd0aCddKSkgPz8gJyhtaXNzaW5nKSc7CmNvbnN0IG5vU1cgPSBsb2Nh dGlvbi5zZWFyY2guaW5jbHVkZXMoJ25vc3cnKTsKY29uc3Qgc3RhdHVzRWwgPSBkb2N1bWVudC5n ZXRFbGVtZW50QnlJZCgnc3ctc3RhdHVzJyk7CmNvbnN0IHRvZ2dsZSA9IGRvY3VtZW50LmdldEVs ZW1lbnRCeUlkKCd0b2dnbGUnKTsKCmNvbnN0IHJlZnJlc2ggPSAoKSA9PiB7CiAgY29uc3QgYyA9 IG5hdmlnYXRvci5zZXJ2aWNlV29ya2VyLmNvbnRyb2xsZXI7CiAgc3RhdHVzRWwudGV4dENvbnRl bnQgPSAnUGFnZSBjb250cm9sbGVkIGJ5IHNlcnZpY2Ugd29ya2VyOiAnICsgKGMgPyAnWUVTICgn ICsgYy5zY3JpcHRVUkwgKyAnKScgOiAnTk8nKTsKICB0b2dnbGUudGV4dENvbnRlbnQgPSBjID8g J1N3aXRjaCB0byBCIHNpZGUgKHVucmVnaXN0ZXIgU1cpJyA6ICdTd2l0Y2ggdG8gQSBzaWRlIChy ZWdpc3RlciBTVyknOwp9Owp0b2dnbGUub25jbGljayA9IGFzeW5jICgpID0+IHsKICBjb25zdCBy ZWdzID0gYXdhaXQgbmF2aWdhdG9yLnNlcnZpY2VXb3JrZXIuZ2V0UmVnaXN0cmF0aW9ucygpOwog IGF3YWl0IFByb21pc2UuYWxsKHJlZ3MubWFwKHIgPT4gci51bnJlZ2lzdGVyKCkpKTsKICBsb2Nh dGlvbi5yZXBsYWNlKGxvY2F0aW9uLnBhdGhuYW1lICsgKG5hdmlnYXRvci5zZXJ2aWNlV29ya2Vy LmNvbnRyb2xsZXIgPyAnP25vc3c9MScgOiAnJykpOwp9OwppZiAobm9TVykgewogIG5hdmlnYXRv ci5zZXJ2aWNlV29ya2VyLmdldFJlZ2lzdHJhdGlvbnMoKQogICAgLnRoZW4ocnMgPT4gUHJvbWlz ZS5hbGwocnMubWFwKHIgPT4gci51bnJlZ2lzdGVyKCkpKSkKICAgIC50aGVuKHJlZnJlc2gpOwp9 IGVsc2UgewogIG5hdmlnYXRvci5zZXJ2aWNlV29ya2VyLnJlZ2lzdGVyKCcuL3N3LmpzJykudGhl bihyZWZyZXNoKTsKfQpuYXZpZ2F0b3Iuc2VydmljZVdvcmtlci5yZWFkeS50aGVuKHJlZnJlc2gp LmNhdGNoKCgpID0+IHt9KTsKc2V0VGltZW91dChyZWZyZXNoLCA4MDApOwoKY29uc3QgeGhyUHV0 ID0gYm9keSA9PiBuZXcgUHJvbWlzZShyZXMgPT4gewogIGNvbnN0IHggPSBuZXcgWE1MSHR0cFJl cXVlc3QoKTsKICB4Lm9wZW4oJ1BVVCcsIEVDSE8gKyAnL3B1dCcpOwogIHgudGltZW91dCA9IDMw MDAwOwogIGxldCBwcm9ncmVzcyA9ICdubyB1cGxvYWQgcHJvZ3Jlc3MgZXZlbnRzJzsKICB4LnVw bG9hZC5vbnByb2dyZXNzID0gZSA9PiB7IHByb2dyZXNzID0gJ3VwbG9hZCBwcm9ncmVzcyAnICsg ZS5sb2FkZWQgKyAnLycgKyBlLnRvdGFsOyB9OwogIHgub25sb2FkID0gKCkgPT4geyB0cnkgeyBy ZXMoJ3NlcnZlciByZWNlaXZlZCBDb250ZW50LUxlbmd0aD0nICsgY2woSlNPTi5wYXJzZSh4LnJl c3BvbnNlKS5oZWFkZXJzKSArICc7ICcgKyBwcm9ncmVzcyk7IH0gY2F0Y2ggKGUpIHsgcmVzKCd1 bnBhcnNlYWJsZSByZXNwb25zZSAoSFRUUCAnICsgeC5zdGF0dXMgKyAnKTsgJyArIHByb2dyZXNz KTsgfSB9OwogIHgub25lcnJvciA9ICgpID0+IHJlcygnbmV0d29yayBlcnJvcjsgJyArIHByb2dy ZXNzKTsKICB4Lm9udGltZW91dCA9ICgpID0+IHJlcygndGltZW91dCAzMHM7ICcgKyBwcm9ncmVz cyk7CiAgeC5zZW5kKGJvZHkpOwp9KTsKZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2YnKS5vbmNo YW5nZSA9IGFzeW5jIGV2ID0+IHsKICBjb25zdCBmaWxlID0gZXYudGFyZ2V0LmZpbGVzWzBdOwog IGNvbnN0IGMgPSBuYXZpZ2F0b3Iuc2VydmljZVdvcmtlci5jb250cm9sbGVyOwogIG91dCgnPT09 IHJ1biBzdGFydCA9PT0nKTsKICBvdXQoJ3BhZ2UgY29udHJvbGxlZCBieSBTVzogJyArIChjID8g J1lFUycgOiAnTk8nKSk7CiAgb3V0KCdwaWNrZWQ6ICcgKyBmaWxlLm5hbWUgKyAnLCBzaXplPScg KyBmaWxlLnNpemUgKyAnLCB0eXBlPScgKyBmaWxlLnR5cGUpOwogIHRyeSB7CiAgICBjb25zdCBy ID0gYXdhaXQgZmV0Y2goRUNITyArICcvZ2V0Jyk7CiAgICBvdXQoJzApIGNvbnRyb2wgR0VUOiBI VFRQICcgKyByLnN0YXR1cyArICcg4oCUIGVjaG8gcmVhY2hhYmxlJyk7CiAgfSBjYXRjaCAoZSkg ewogICAgb3V0KCcwKSBjb250cm9sIEdFVCBGQUlMRUQgKCcgKyBlLm1lc3NhZ2UgKyAnKSDigJQg ZWNobyB1bnJlYWNoYWJsZSwgcmVzdWx0cyBOT1QgY29uY2x1c2l2ZScpOwogIH0KICBvdXQoJzEp IFhIUiBkaXNrLWJhY2tlZCBGaWxlOiAnICsgYXdhaXQgeGhyUHV0KGZpbGUpKTsKICB0cnkgewog ICAgY29uc3QgciA9IGF3YWl0IGZldGNoKEVDSE8gKyAnL3B1dCcsIHsgbWV0aG9kOiAnUFVUJywg Ym9keTogZmlsZSB9KTsKICAgIG91dCgnMikgZmV0Y2ggZGlzay1iYWNrZWQgRmlsZTogc2VydmVy IHJlY2VpdmVkIENvbnRlbnQtTGVuZ3RoPScgKyBjbCgoYXdhaXQgci5qc29uKCkpLmhlYWRlcnMp KTsKICB9IGNhdGNoIChlKSB7IG91dCgnMikgZmV0Y2ggZGlzay1iYWNrZWQgRmlsZTogJyArIGUu bWVzc2FnZSk7IH0KICBjb25zdCBidWYgPSBhd2FpdCBmaWxlLmFycmF5QnVmZmVyKCk7CiAgb3V0 KCczKSBmaWxlLmFycmF5QnVmZmVyKCkgcmVhZCAnICsgYnVmLmJ5dGVMZW5ndGggKyAnIGJ5dGVz IGluLXBhZ2UnKTsKICBvdXQoJzQpIFhIUiBpbi1tZW1vcnkgQmxvYiBjb3B5OiAnICsgYXdhaXQg eGhyUHV0KG5ldyBCbG9iKFtidWZdLCB7IHR5cGU6IGZpbGUudHlwZSB9KSkpOwogIG91dCgnJyk7 Cn07Cjwvc2NyaXB0Pgo8L2JvZHk+CjwvaHRtbD4K 481111 2026-08-19 08:16:35 -0700 2026-08-19 08:16:35 -0700 Reproduction example for loading from IndexedDB indexed_db_reproduction.html text/html 7608 tobias PCFET0NUWVBFIGh0bWw+CjxodG1sPgo8aGVhZD4KICAgIDxtZXRhIGNoYXJzZXQ9IlVURi04Ij4K ICAgIDx0aXRsZT5CbG9iIC8gSW5kZXhlZERCIFJlcHJvZHVjdGlvbjwvdGl0bGU+CjwvaGVhZD4K PGJvZHkgc3R5bGU9ImRpc3BsYXk6IGZsZXg7IGZsZXgtZGlyZWN0aW9uOiBjb2x1bW47IHJvdy1n YXA6IDMwcHg7Ij4KICAgIDxsYWJlbD48aW5wdXQgaWQ9ImZpbGVpbnN0YW5jZSIgdHlwZT0iY2hl Y2tib3giIGNoZWNrZWQ+Q3JlYXRlIEJsb2IgYXMgRmlsZSBpbnN0YW5jZT88L2xhYmVsPgogICAg PGxhYmVsPlRhcmdldCBTZXJ2ZXI6IDxpbnB1dCBpZD0idGFyZ2V0c2VydmVyIiB2YWx1ZT0iaHR0 cHM6Ly9odHRwYnVuLmNvbS9wb3N0Ii8+PC9sYWJlbD4KCiAgICA8YnV0dG9uIGlkPSJydW4iPlJ1 biB0ZXN0PC9idXR0b24+CiAgICA8cHJlIGlkPSJsb2ciPjwvcHJlPgoKICAgIDxzY3JpcHQ+CiAg ICAgICAgY29uc3QgbG9nRWxlbWVudCA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJsb2ciKTsK CiAgICAgICAgZnVuY3Rpb24gbG9nKC4uLmFyZ3MpIHsKICAgICAgICAgICAgY29uc29sZS5sb2co Li4uYXJncyk7CiAgICAgICAgICAgIGxvZ0VsZW1lbnQudGV4dENvbnRlbnQgKz0gYXJncy5tYXAo U3RyaW5nKS5qb2luKCIgIikgKyAiXG4iOwogICAgICAgIH0KCiAgICAgICAgZnVuY3Rpb24gb3Bl bkRhdGFiYXNlKCkgewogICAgICAgICAgICByZXR1cm4gbmV3IFByb21pc2UoKHJlc29sdmUsIHJl amVjdCkgPT4gewogICAgICAgICAgICAgICAgY29uc3QgcmVxdWVzdCA9IGluZGV4ZWREQi5vcGVu KCJpbmRleGVkZGItZmlsZS1ibG9iLXRlc3QiLCAxKTsKCiAgICAgICAgICAgICAgICByZXF1ZXN0 Lm9udXBncmFkZW5lZWRlZCA9ICgpID0+IHsKICAgICAgICAgICAgICAgICAgICBjb25zdCBkYiA9 IHJlcXVlc3QucmVzdWx0OwoKICAgICAgICAgICAgICAgICAgICBpZiAoIWRiLm9iamVjdFN0b3Jl TmFtZXMuY29udGFpbnMoImZpbGVzIikpIHsKICAgICAgICAgICAgICAgICAgICAgICAgZGIuY3Jl YXRlT2JqZWN0U3RvcmUoImZpbGVzIik7CiAgICAgICAgICAgICAgICAgICAgfQogICAgICAgICAg ICAgICAgfTsKCiAgICAgICAgICAgICAgICByZXF1ZXN0Lm9uc3VjY2VzcyA9ICgpID0+IHJlc29s dmUocmVxdWVzdC5yZXN1bHQpOwogICAgICAgICAgICAgICAgcmVxdWVzdC5vbmVycm9yID0gKCkg PT4gcmVqZWN0KHJlcXVlc3QuZXJyb3IpOwogICAgICAgICAgICB9KTsKICAgICAgICB9CgogICAg ICAgIGZ1bmN0aW9uIHNhdmVUb0luZGV4ZWREQihibG9iKSB7CiAgICAgICAgICAgIHJldHVybiBu ZXcgUHJvbWlzZShhc3luYyAocmVzb2x2ZSwgcmVqZWN0KSA9PiB7CiAgICAgICAgICAgICAgICBj b25zdCBkYiA9IGF3YWl0IG9wZW5EYXRhYmFzZSgpOwoKICAgICAgICAgICAgICAgIGNvbnN0IHRy YW5zYWN0aW9uID0gZGIudHJhbnNhY3Rpb24oImZpbGVzIiwgInJlYWR3cml0ZSIpOwogICAgICAg ICAgICAgICAgY29uc3Qgc3RvcmUgPSB0cmFuc2FjdGlvbi5vYmplY3RTdG9yZSgiZmlsZXMiKTsK CiAgICAgICAgICAgICAgICBzdG9yZS5wdXQoYmxvYiwgInRlc3QtZmlsZSIpOwoKICAgICAgICAg ICAgICAgIHRyYW5zYWN0aW9uLm9uY29tcGxldGUgPSAoKSA9PiB7CiAgICAgICAgICAgICAgICAg ICAgZGIuY2xvc2UoKTsKICAgICAgICAgICAgICAgICAgICByZXNvbHZlKCk7CiAgICAgICAgICAg ICAgICB9OwoKICAgICAgICAgICAgICAgIHRyYW5zYWN0aW9uLm9uZXJyb3IgPSAoKSA9PiB7CiAg ICAgICAgICAgICAgICAgICAgZGIuY2xvc2UoKTsKICAgICAgICAgICAgICAgICAgICByZWplY3Qo dHJhbnNhY3Rpb24uZXJyb3IpOwogICAgICAgICAgICAgICAgfTsKICAgICAgICAgICAgfSk7CiAg ICAgICAgfQoKICAgICAgICBmdW5jdGlvbiBsb2FkRnJvbUluZGV4ZWREQigpIHsKICAgICAgICAg ICAgcmV0dXJuIG5ldyBQcm9taXNlKGFzeW5jIChyZXNvbHZlLCByZWplY3QpID0+IHsKICAgICAg ICAgICAgICAgIGNvbnN0IGRiID0gYXdhaXQgb3BlbkRhdGFiYXNlKCk7CgogICAgICAgICAgICAg ICAgY29uc3QgdHJhbnNhY3Rpb24gPSBkYi50cmFuc2FjdGlvbigiZmlsZXMiLCAicmVhZG9ubHki KTsKICAgICAgICAgICAgICAgIGNvbnN0IHN0b3JlID0gdHJhbnNhY3Rpb24ub2JqZWN0U3RvcmUo ImZpbGVzIik7CgogICAgICAgICAgICAgICAgY29uc3QgcmVxdWVzdCA9IHN0b3JlLmdldCgidGVz dC1maWxlIik7CgogICAgICAgICAgICAgICAgcmVxdWVzdC5vbnN1Y2Nlc3MgPSAoKSA9PiB7CiAg ICAgICAgICAgICAgICAgICAgZGIuY2xvc2UoKTsKICAgICAgICAgICAgICAgICAgICByZXNvbHZl KHJlcXVlc3QucmVzdWx0KTsKICAgICAgICAgICAgICAgIH07CgogICAgICAgICAgICAgICAgcmVx dWVzdC5vbmVycm9yID0gKCkgPT4gewogICAgICAgICAgICAgICAgICAgIGRiLmNsb3NlKCk7CiAg ICAgICAgICAgICAgICAgICAgcmVqZWN0KHJlcXVlc3QuZXJyb3IpOwogICAgICAgICAgICAgICAg fTsKICAgICAgICAgICAgfSk7CiAgICAgICAgfQoKICAgICAgICBhc3luYyBmdW5jdGlvbiBzZW5k QmxvYihsYWJlbCwgYmxvYikgewogICAgICAgICAgICBsb2coYFxuPT09ICR7bGFiZWx9ID09PWAp OwogICAgICAgICAgICBsb2coImNvbnN0cnVjdG9yOiIsIGJsb2I/LmNvbnN0cnVjdG9yPy5uYW1l KTsKICAgICAgICAgICAgbG9nKCJzaXplOiIsIGJsb2I/LnNpemUpOwogICAgICAgICAgICBsb2co InR5cGU6IiwgYmxvYj8udHlwZSk7CiAgICAgICAgICAgIGxvZygiaW5zdGFuY2VvZiBCbG9iOiIs IGJsb2IgaW5zdGFuY2VvZiBCbG9iKTsKICAgICAgICAgICAgbG9nKCJpbnN0YW5jZW9mIEZpbGU6 IiwgYmxvYiBpbnN0YW5jZW9mIEZpbGUpOwoKICAgICAgICAgICAgY29uc3QgYnVmZmVyID0gYXdh aXQgYmxvYi5hcnJheUJ1ZmZlcigpOwoKICAgICAgICAgICAgbG9nKCJhcnJheUJ1ZmZlciBieXRl TGVuZ3RoOiIsIGJ1ZmZlci5ieXRlTGVuZ3RoKTsKCiAgICAgICAgICAgIGNvbnN0IGZvcm1EYXRh ID0gbmV3IEZvcm1EYXRhKCk7CgogICAgICAgICAgICBmb3JtRGF0YS5hcHBlbmQoInRleHQiLCAi VGV4dC1Db250ZW50Iik7CiAgICAgICAgICAgIGZvcm1EYXRhLmFwcGVuZCgKICAgICAgICAgICAg ICAgICJmaWxlIiwKICAgICAgICAgICAgICAgIGJsb2IsCiAgICAgICAgICAgICAgICAidGVzdC50 eHQiCiAgICAgICAgICAgICk7CgogICAgICAgICAgICBsb2coIlNlbmRpbmcuLi4iKTsKCiAgICAg ICAgICAgIHRyeSB7CiAgICAgICAgICAgICAgICBjb25zdCB1cGxvYWRfdXJsID0gZG9jdW1lbnQu Z2V0RWxlbWVudEJ5SWQoInRhcmdldHNlcnZlciIpLnZhbHVlOwoKICAgICAgICAgICAgICAgIGNv bnN0IHJlc3BvbnNlID0gYXdhaXQgZmV0Y2godXBsb2FkX3VybCwgewogICAgICAgICAgICAgICAg ICAgIG1ldGhvZDogIlBPU1QiLAogICAgICAgICAgICAgICAgICAgIGJvZHk6IGZvcm1EYXRhCiAg ICAgICAgICAgICAgICB9KTsKCiAgICAgICAgICAgICAgICBsb2coIkhUVFAgc3RhdHVzOiIsIHJl c3BvbnNlLnN0YXR1cyk7CgogICAgICAgICAgICAgICAgY29uc3QgcmVzcG9uc2VUZXh0ID0gYXdh aXQgcmVzcG9uc2UudGV4dCgpOwogICAgICAgICAgICAgICAgbG9nKCJSZXNwb25zZToiLCByZXNw b25zZVRleHQpOwogICAgICAgICAgICB9IGNhdGNoIChlcnJvcikgewogICAgICAgICAgICAgICAg bG9nKCJVUExPQUQgRVJST1I6IiwgZXJyb3IpOwogICAgICAgICAgICB9CiAgICAgICAgfQoKICAg ICAgICBhc3luYyBmdW5jdGlvbiBydW5UZXN0KCkgewogICAgICAgICAgICBsb2dFbGVtZW50LnRl eHRDb250ZW50ID0gIiI7CgogICAgICAgICAgICB0cnkgewogICAgICAgICAgICAgICAgLy8gLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KICAgICAgICAg ICAgICAgIC8vIDAuIENoZWNrIGZvciBzZXJ2aWNlIHdvcmtlcgogICAgICAgICAgICAgICAgLy8g LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KCiAgICAg ICAgICAgICAgICBpZiAobmF2aWdhdG9yLnNlcnZpY2VXb3JrZXI/LmNvbnRyb2xsZXIpIHsKICAg ICAgICAgICAgICAgICAgICBsb2coIkEgU2VydmljZSBXb3JrZXIgY3VycmVudGx5IGNvbnRyb2xz IHRoaXMgcGFnZS4iKTsKICAgICAgICAgICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgICAgICAg ICAgbG9nKCJObyBTZXJ2aWNlIFdvcmtlciBkZXRlY3RlZC4iKTsKICAgICAgICAgICAgICAgIH0K CgogICAgICAgICAgICAgICAgLy8gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0KICAgICAgICAgICAgICAgIC8vIDEuIENyZWF0ZSBCbG9iIGluIG1lbW9y eQogICAgICAgICAgICAgICAgLy8gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0KCiAgICAgICAgICAgICAgICBjb25zdCBjb250ZW50ID0KICAgICAgICAg ICAgICAgICAgICAiVGhpcyBpcyBhIEluZGV4ZWREQiBCbG9iIHJlcHJvZHVjdGlvbiB0ZXN0Llxu IiArCiAgICAgICAgICAgICAgICAgICAgIkl0IHNob3VsZCBiZSBzZW50IGFzIG11bHRpcGFydC9m b3JtLWRhdGEuXG4iICsKICAgICAgICAgICAgICAgICAgICAiMTIzNDU2Nzg5MCI7CgogICAgICAg ICAgICAgICAgbGV0IGJsb2I7CgogICAgICAgICAgICAgICAgaWYgKGRvY3VtZW50LmdldEVsZW1l bnRCeUlkKCJmaWxlaW5zdGFuY2UiKS5jaGVja2VkKSB7CiAgICAgICAgICAgICAgICAgIGJsb2Ig PSBuZXcgRmlsZSgKICAgICAgICAgICAgICAgICAgICAgIFtjb250ZW50XSwKICAgICAgICAgICAg ICAgICAgICAgICJ0ZXN0LnR4dCIsCiAgICAgICAgICAgICAgICAgICAgICB7IHR5cGU6ICJ0ZXh0 L3BsYWluIiB9CiAgICAgICAgICAgICAgICAgICk7CiAgICAgICAgICAgICAgICB9IGVsc2Ugewog ICAgICAgICAgICAgICAgICBibG9iID0gbmV3IEJsb2IoCiAgICAgICAgICAgICAgICAgICAgICBb Y29udGVudF0sCiAgICAgICAgICAgICAgICAgICAgICB7IHR5cGU6ICJ0ZXh0L3BsYWluIiB9CiAg ICAgICAgICAgICAgICAgICk7CiAgICAgICAgICAgICAgICB9CgogICAgICAgICAgICAgICAgbG9n KCJPcmlnaW5hbCBCbG9iIGNyZWF0ZWQuIik7CiAgICAgICAgICAgICAgICBsb2coIkV4cGVjdGVk IHNpemU6IiwgbmV3IFRleHRFbmNvZGVyKCkuZW5jb2RlKGNvbnRlbnQpLmJ5dGVMZW5ndGgpOwoK ICAgICAgICAgICAgICAgIC8vIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tCiAgICAgICAgICAgICAgICAvLyAyLiBTZW5kIG9yaWdpbmFsIEJsb2IKICAg ICAgICAgICAgICAgIC8vIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tCgogICAgICAgICAgICAgICAgYXdhaXQgc2VuZEJsb2IoCiAgICAgICAgICAgICAg ICAgICAgIkRJUkVDVCBCTE9CIiwKICAgICAgICAgICAgICAgICAgICBibG9iCiAgICAgICAgICAg ICAgICApOwoKICAgICAgICAgICAgICAgIC8vIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAgICAgICAgICAgICAgICAvLyAzLiBTdG9yZSBCbG9iIGlu IEluZGV4ZWREQgogICAgICAgICAgICAgICAgLy8gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KCiAgICAgICAgICAgICAgICBsb2coIlxuU2F2aW5nIEJs b2IgdG8gSW5kZXhlZERCLi4uIik7CgogICAgICAgICAgICAgICAgYXdhaXQgc2F2ZVRvSW5kZXhl ZERCKGJsb2IpOwoKICAgICAgICAgICAgICAgIGxvZygiU2F2ZWQuIik7CgogICAgICAgICAgICAg ICAgLy8gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0K ICAgICAgICAgICAgICAgIC8vIDQuIExvYWQgQmxvYiBmcm9tIEluZGV4ZWREQgogICAgICAgICAg ICAgICAgLy8gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0KCiAgICAgICAgICAgICAgICBsb2coIkxvYWRpbmcgQmxvYiBmcm9tIEluZGV4ZWREQi4uLiIp OwoKICAgICAgICAgICAgICAgIGNvbnN0IGxvYWRlZEJsb2IgPSBhd2FpdCBsb2FkRnJvbUluZGV4 ZWREQigpOwoKICAgICAgICAgICAgICAgIGxvZygiTG9hZGVkLiIpOwoKICAgICAgICAgICAgICAg IC8vIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCiAg ICAgICAgICAgICAgICAvLyA1LiBTZW5kIEluZGV4ZWREQiBCbG9iCiAgICAgICAgICAgICAgICAv LyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQoKICAg ICAgICAgICAgICAgIGF3YWl0IHNlbmRCbG9iKAogICAgICAgICAgICAgICAgICAgICJJTkRFWEVE REIgQkxPQiIsCiAgICAgICAgICAgICAgICAgICAgbG9hZGVkQmxvYgogICAgICAgICAgICAgICAg KTsKCiAgICAgICAgICAgICAgICAvLyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQogICAgICAgICAgICAgICAgLy8gNi4gTWFrZSBhbiBpbi1tZW1vcnkg Y29weQogICAgICAgICAgICAgICAgLy8gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0KCiAgICAgICAgICAgICAgICBsZXQgY29waWVkQmxvYjsKCiAgICAg ICAgICAgICAgICBpZiAoZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoImZpbGVpbnN0YW5jZSIpLmNo ZWNrZWQpIHsKICAgICAgICAgICAgICAgICAgY29waWVkQmxvYiA9IG5ldyBGaWxlKAogICAgICAg ICAgICAgICAgICAgIFthd2FpdCBsb2FkZWRCbG9iLmFycmF5QnVmZmVyKCldLAogICAgICAgICAg ICAgICAgICAgICJ0ZXN0LnR4dCIsCiAgICAgICAgICAgICAgICAgICAgeyB0eXBlOiBsb2FkZWRC bG9iLnR5cGUgfQogICAgICAgICAgICAgICAgICApOwogICAgICAgICAgICAgICAgfSBlbHNlIHsK ICAgICAgICAgICAgICAgICAgY29waWVkQmxvYiA9IG5ldyBCbG9iKAogICAgICAgICAgICAgICAg ICAgIFthd2FpdCBsb2FkZWRCbG9iLmFycmF5QnVmZmVyKCldLAogICAgICAgICAgICAgICAgICAg IHsgdHlwZTogbG9hZGVkQmxvYi50eXBlIH0KICAgICAgICAgICAgICAgICAgKTsKICAgICAgICAg ICAgICAgIH0KCiAgICAgICAgICAgICAgICBhd2FpdCBzZW5kQmxvYigKICAgICAgICAgICAgICAg ICAgICAiSU5ERVhFRERCIEJMT0IgLT4gQVJSQVlCVUZGRVIgLT4gTkVXIEJMT0IiLAogICAgICAg ICAgICAgICAgICAgIGNvcGllZEJsb2IKICAgICAgICAgICAgICAgICk7CgogICAgICAgICAgICB9 IGNhdGNoIChlcnJvcikgewogICAgICAgICAgICAgICAgbG9nKCJcblRFU1QgRVJST1I6IiwgZXJy b3IpOwogICAgICAgICAgICAgICAgY29uc29sZS5lcnJvcihlcnJvcik7CiAgICAgICAgICAgIH0K ICAgICAgICB9CgogICAgICAgIGRvY3VtZW50CiAgICAgICAgICAgIC5nZXRFbGVtZW50QnlJZCgi cnVuIikKICAgICAgICAgICAgLmFkZEV2ZW50TGlzdGVuZXIoImNsaWNrIiwgcnVuVGVzdCk7CiAg ICA8L3NjcmlwdD4KPC9ib2R5Pgo8L2h0bWw+