Bug 186050

Summary: Allow range requests to pass through a service worker
Product: WebKit Reporter: Jake Archibald <jaffathecake>
Component: Service WorkersAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: ben, s.h.h.n.j.k, steve, youennf
Priority: P2    
Version: Safari Technology Preview   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=184447

Jake Archibald
Reported 2018-05-29 06:42:28 PDT
Spec change: https://github.com/whatwg/fetch/pull/560. Tests: https://github.com/web-platform-tests/wpt/pull/10348. Security issues to pay attention to: https://github.com/whatwg/fetch/issues/144#issuecomment-368040980 This spec change means that rage requests (such as those from media elements) are allowed to pass through a service worker as long as they aren't modified. This fixes a long standing issue where media elements behave oddly if intercepted by a service worker (as the range headers were lost). How media elements ingest partial responses remains unspecified for now. See the attacks in https://github.com/whatwg/fetch/issues/144#issuecomment-368040980 & their mitigations. Attack 4 is already covered in the tests.
Attachments
youenn fablet
Comment 1 2018-05-29 11:24:45 PDT
youenn fablet
Comment 2 2019-10-23 07:16:45 PDT
*** This bug has been marked as a duplicate of bug 184447 ***
Note You need to log in before you can comment on or make changes to this bug.