Bug 184733

Summary: HttpOnly cookies not included in Application Cache (appcache) requests
Product: WebKit Reporter: stefan.farthofer
Component: New BugsAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Major CC: achristensen, cdumez, dbates, stefan.farthofer, webkit-bug-importer, youennf
Priority: P2 Keywords: InRadar
Version: Safari 11   
Hardware: All   
OS: Unspecified   
Attachments:
Description Flags
simple http server to repro the issue none

stefan.farthofer
Reported 2018-04-18 07:16:31 PDT
Created attachment 338214 [details] simple http server to repro the issue Safari on iOS 11.3 and Safari 11.1 on OS X 10.12.6 (AppleWebKit/605.1.15) do not send HttpOnly cookies when requesting the application cache manifest or resources listed in the manifest. This breaks offline capabilities for sites that use such cookies to decide which resources to make available offline. Attached you'll find a simple python 3 program that acts as an HTTP server to repro the issue. Expected output would be requests to /manfiest and /resource with cookies. On current safari those requests are sent without cookies however.
Attachments
simple http server to repro the issue (1.58 KB, text/plain)
2018-04-18 07:16 PDT, stefan.farthofer 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2018-04-20 23:41:47 PDT
<rdar://problem/39618631>
stefan.farthofer
Comment 2 2018-05-30 05:25:04 PDT
The issue seems to be fixed with iOS 11.4.
Note You need to log in before you can comment on or make changes to this bug.