Bug 218705

Summary: No cookies access for extension pages opened through browser.windows.create or in iframe
Product: WebKit Reporter: Rustem <winlinx>
Component: Page LoadingAssignee: Nobody <webkit-unassigned>
Status: RESOLVED INVALID    
Severity: Critical CC: beidson, sihui_liu, smoley, wilander
Priority: P2    
Version: Safari 14   
Hardware: Mac   
OS: All   

Rustem
Reported 2020-11-09 06:08:20 PST
This bug releated to Web Extensions in Safari 14. When I try to open a window with browser.windows.create (or include an iframe on page) pointing to my index.html and inside of it I make an API requests to host (https) that explicitly specified in permissions manifest field, the cookies are not send to this host. So in other words I can't do API requests to my own server from such windows. This works only from browser_action popover. This behaviour differs from all other browsers, they allow to do this.
Attachments
Smoley
Comment 1 2020-11-09 11:40:57 PST
Thanks for filing. Safari Web Extensions issues are not typically tracked on bugs.WebKit.org. Please file this feedback via feedbackassistant.apple.com.
Note You need to log in before you can comment on or make changes to this bug.