Bug 286922 – WKWebView opens opens a TLS connection before calling decidePolicyForNavigationAction (and despite it returning WKNavigationActionPolicyCancel)

• Component: WebKit API
• Status: NEW

[Jeff Johnson]

Created attachment 474122 [details]
Sample Xcode project

WKWebView opens https links before the WKNavigationDelegate method webView:decidePolicyForNavigationAction:decisionHandler: is called, even with WKNavigationActionPolicyCancel.

Attached is a sample Xcode project demonstrating the bug. It calls decisionHandler(WKNavigationActionPolicyCancel) for all WKNavigationTypeLinkActivated navigation actions. If you click the http: link, then it simply cancels as expected. Whereas if you click the https: link, it attempts to connect to the linked URL before decidePolicyForNavigationAction: is called. This can be verified with a firewall such as Little Snitch or a packet trace.

[Jeff Johnson]

Created attachment 474123 [details]
Screenshot showing the WebKit Networking process connecting to https://example.org

[Radar WebKit Bug Importer]

<rdar://problem/144527847>

[Geoffrey Garen]

I think the word "link" may be ambiguous here.

Do you mean that the WebView follows an HTML anchor link navigation, and renders the webpage?

Or do you mean that the WebView opens a TLS connection (but does not follows any HTML anchor link navigation, or render any webpage)?

[Jeff Johnson]

I mean that the WebView opens a TLS connection. If it rendered the webpage, then you wouldn't need a packet trace or the like to verify the bug.