Bug 20106
| Summary: | Ajax posts from iframe don't work as expected | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Joseph Conder <conder> |
| Component: | WebKit Misc. | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED INVALID | ||
| Severity: | Normal | CC: | ap, barraclough |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | Mac | ||
| OS: | OS X 10.5 | ||
Joseph Conder
AJAX POST requests from inside an IFrame do not seem to work. AJAX GET requests seem to work fine. FYI, the IFrame src content resides on a different domain than the base document.
The strange thing is that if I load the contents of the IFrame in a top level window and then go back to the page with the IFrame, then NOW it will handle the AJAX POST.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Joseph Conder
It appears to be related to a security issue. The application is SSO enabled and the third-party server writes a cookie (it's in the same domain but a different host). This could explain the failed posts, but why should I be able to request a GET to the same URL with success?
Gavin Barraclough
Doesn't look like a JSC bug.
Alexey Proskuryakov
I think that you are seeing Safari's default cookie blocking policy in action. 3rd party subframes are by default not allowed to set cookies - this is to limit ad network tracking of users across sites.
Please feel free to re-open if this issue is different than what I think it is.