Bug 283478

Summary: [WebAuthn] Transports are not lexicographically sorted
Product: WebKit Reporter: shinkieun
Component: WebCore Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Major CC: karlcow, nitinmahendru, pascoe, shinkieun, webkit-bug-importer
Priority: P2 Keywords: BrowserCompat, InRadar
Version: Safari 17   
Hardware: Mac (Apple Silicon)   
OS: macOS 14   

shinkieun
Reported 2024-11-21 03:17:11 PST
When testing with Safari v17.5, I got following transports ["internal", "hybrid"] when creating the passkey with iCloud Keychain. The spec defines that the transports MUST be lexicographical ordered. See followings links. - https://w3c.github.io/webauthn/#dom-authenticatorattestationresponse-transports-slot
Attachments
Alexey Proskuryakov
Comment 1 2024-11-23 10:59:40 PST
Thank you for the report. 17.5 its quite old, are you still seeing this with up to date Safari versions?
shinkieun
Comment 2 2024-11-24 22:00:38 PST
I can't update the Safari due to corporate device's policy at the moment.
Radar WebKit Bug Importer
Comment 3 2024-11-28 03:18:13 PST
EWS
Comment 4 2025-01-14 12:49:55 PST
Committed 288881@main (4f798717acc1): <https://commits.webkit.org/288881@main> Reviewed commits have been landed. Closing PR #37321 and removing active labels.
Note You need to log in before you can comment on or make changes to this bug.