Bug 296016
| Summary: | Page crash when loading http: after https: | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Jeff Johnson <opendarwin> |
| Component: | WebKit Extensions | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Normal | CC: | ap, beidson, jberlin, timothy, webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | Safari 26 | ||
| Hardware: | Mac (Apple Silicon) | ||
| OS: | macOS 15 | ||
Jeff Johnson
Safari Technology Preview 223 on macOS 15.5. The crash does not occur in Safari 18.5.
Steps to reproduce:
1. Enter https://www.kobo.com in the Safari address bar and press return to open the page
2. Enter http://www.kobo.com in the Safari address bar and press return to open the page
"This webpage was reloaded because a problem occurred."
The bug does not occur if I just load http://www.kobo.com by itself (which is promoted to https).
I actually discovered the bug using slightly different URLs in the address bar:
1. https://help.kobo.com/hc/en-us/articles/4408228476567-About-Kobo-Web-Reader
2. kobo.com
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Alexey Proskuryakov
I am unable to reproduce this with STP 223 on macOS Tahoe beta, nor in macOS 15.6 beta, not even in an older build of macOS 15.4 that I have around. Could you please attach a crash log? Or if there isn't one, system logs from com.apple.WebKit.* processes would be helpful.
Jeff Johnson
Now that you mention it, I can reproduce the bug on macOS Tahoe too.
Do you have "Preload Top Hit in the background" enabled (as it is by default)? If so, that may be why you're not seeing it. Please try disabling that setting, or else in step 2, open the web inspector and enter location="http://www.kobo.com"
Alexey Proskuryakov
It was on, however I still cannot reproduce with it off, and neither when navigating via DOM API like this.
Jeff Johnson
Ok, I've figured this out: it's actually a Safari extensions bug! Specifically, it seems, a declarativeNetRequest bug. I can only reproduce the bug if this Safari extension is enabled:
https://apps.apple.com/app/changetheheaders-for-safari/id6743129567
Bizarrely, the bug occurs even if the extension has no access to any website. The extension just needs to be enabled in Safari/STP Extensions Settings.
Radar WebKit Bug Importer
<rdar://problem/156005090>
Jeff Johnson
This bug now exists in Safari 26.0.1 (20622.1.22.118.4), and I can also reproduce it on other websites.
For example, if I first load https://www.cnn.com/2025/09/23/health/health-study-participation-wellness and then enter cnn.com or http://cnn.com in the Safari address bar, it crashes.
Alexey Proskuryakov
Thank you for the follow up! This ended up getting fixed via bug 297077, and should be resolved in macOS 26.1 first public beta.
*** This bug has been marked as a duplicate of bug 297077 ***
Alexey Proskuryakov
Please watch https://developer.apple.com/download/all/ for upcoming Safari 26.1 betas for older OS versions, too.