Bug 169540

Summary: CORS: redirects are not failed for URLs that include credentials
Product: WebKit Reporter: Anne van Kesteren <annevk>
Component: DOMAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: achristensen, ap, cdumez, dbates, rbuis, youennf
Priority: P2    
Version: Safari Technology Preview   
Hardware: Unspecified   
OS: Unspecified   

Description Anne van Kesteren 2017-03-13 01:10:54 PDT 
See https://github.com/w3c/web-platform-tests/pull/5121 (was also failing before that PR though).
Comment 1 Alexey Proskuryakov 2017-03-13 09:42:09 PDT 
Could you please provide a link for running the test too?
Comment 2 Anne van Kesteren 2017-03-13 09:44:23 PDT 
http://w3c-test.org/submissions/5121/cors/redirect-userinfo.htm until it lands (at which point drop "submissions/5121/" from the URL).
Comment 3 Rob Buis 2020-01-02 08:48:39 PST 
It seems this works in Safari TP 97.
Comment 4 youenn fablet 2020-01-03 01:35:12 PST 

*** This bug has been marked as a duplicate of bug 204036 ***