Bug 184733 - HttpOnly cookies not included in Application Cache (appcache) requests
Summary: HttpOnly cookies not included in Application Cache (appcache) requests
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: Safari 11
Hardware: All Unspecified
: P2 Major
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2018-04-18 07:16 PDT by stefan.farthofer
Modified: 2018-05-30 05:25 PDT (History)
6 users (show)

See Also:

Attachments
simple http server to repro the issue (1.58 KB, text/plain)
2018-04-18 07:16 PDT, stefan.farthofer 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description stefan.farthofer 2018-04-18 07:16:31 PDT 
Created attachment 338214 [details]
simple http server to repro the issue

Safari on iOS 11.3 and Safari 11.1 on OS X 10.12.6 (AppleWebKit/605.1.15) do not send HttpOnly cookies when requesting the application cache manifest or resources listed in the manifest.

This breaks offline capabilities for sites that use such cookies to decide which resources to make available offline.

Attached you'll find a simple python 3 program that acts as an HTTP server to repro the issue.

Expected output would be requests to /manfiest and /resource with cookies. On current safari those requests are sent without cookies however.
Comment 1 Radar WebKit Bug Importer 2018-04-20 23:41:47 PDT 
<rdar://problem/39618631>
Comment 2 stefan.farthofer 2018-05-30 05:25:04 PDT 
The issue seems to be fixed with iOS 11.4.