Bug 311362
| Summary: | [Site Isolation] Cross-site redirect in <object> subframe causes parent page to complete prematurely | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | roberto_rodriguez2 |
| Component: | New Bugs | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | WebKit Nightly Build | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
roberto_rodriguez2
When an <object type="text/html"> element's load is redirected to a different site with site isolation enabled, the parent page fires its load event before the redirected content loads in the new process. The child frame's error handling path does not distinguish between a real failure and a process-swap cancellation, so the child frame is marked complete and the <object> element renders fallback content instead of waiting for the cross-process load to finish.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Radar WebKit Bug Importer
<rdar://problem/173954545>
roberto_rodriguez2
Pull request: https://github.com/WebKit/WebKit/pull/61927
EWS
Committed 310557@main (534d9836c83d): <https://commits.webkit.org/310557@main>
Reviewed commits have been landed. Closing PR #61927 and removing active labels.