Bug 233854

Summary: <link rel=preload> reuses response regardless of CORS attributes
Product: WebKit Reporter: Noam Rosenthal <noam>
Component: Page LoadingAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: achristensen, beidson, koivisto, webkit-bug-importer, youennf
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Description Noam Rosenthal 2021-12-04 02:36:29 PST
See new failing WPT: https://wpt.fyi/results/preload/preload-resource-match.https.html
and relevant spec: https://html.spec.whatwg.org/#consume-a-preloaded-resource

Preloaded responses should be reused/discarded based on their "as" and CORS-related attributes.
From the test, it seems like in WebKit, some resources are reused regardless of mismatching CORS attributes, and some are ignored even though all their attributes match.

This bug report is submitted as part of an effort to make the preload future more interoperable across browsers.
Comment 1 Radar WebKit Bug Importer 2021-12-11 02:37:20 PST
<rdar://problem/86357143>