Bug 233854

Summary:	<link rel=preload> reuses response regardless of CORS attributes
Product:	WebKit	Reporter:	Noam Rosenthal <noam>
Component:	Page Loading	Assignee:	Nobody <webkit-unassigned>
Status:	NEW ---
Severity:	Normal	CC:	achristensen, beidson, koivisto, webkit-bug-importer, youennf
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Noam Rosenthal 2021-12-04 02:36:29 PST

See new failing WPT: https://wpt.fyi/results/preload/preload-resource-match.https.html
and relevant spec: https://html.spec.whatwg.org/#consume-a-preloaded-resource

Preloaded responses should be reused/discarded based on their "as" and CORS-related attributes.
From the test, it seems like in WebKit, some resources are reused regardless of mismatching CORS attributes, and some are ignored even though all their attributes match.

This bug report is submitted as part of an effort to make the preload future more interoperable across browsers.

Comment 1 Radar WebKit Bug Importer 2021-12-11 02:37:20 PST

<rdar://problem/86357143>