Bug 184956

Summary:	ITP protect against this exploit
Product:	WebKit	Reporter:	jackiam2003
Component:	New Bugs	Assignee:	Nobody <webkit-unassigned>
Status:	NEW
Severity:	Normal	CC:	webkit-bug-importer, wilander
Priority:	P2	Keywords:	InRadar
Version:	Safari 11
Hardware:	iPhone / iPad
OS:	iOS 11

jackiam2003

Reported 2018-04-24 22:50:08 PDT

Can ITP protect against the exploit described above. “Instart Logic's technology used to disguise third-party network requests as first-party network requests, including the writing/reading of third-party cookies as first-party cookies. I consider this to be extremely hostile to users, even those not using a content blocker, as it allows third-party servers to read/write cookies even if a user chose to block 3rd-party cookies through your browser setting.” https://github.com/gorhill/uBO-Extra

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2018-04-28 00:15:56 PDT

<rdar://problem/39814776>

Note You need to log in before you can comment on or make changes to this bug.