Bug 186050 - Allow range requests to pass through a service worker
Summary: Allow range requests to pass through a service worker
Status: RESOLVED DUPLICATE of bug 184447
Alias: None
Product: WebKit
Classification: Unclassified
Component: Service Workers (show other bugs)
Version: Safari Technology Preview
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-05-29 06:42 PDT by Jake Archibald
Modified: 2019-10-23 07:16 PDT (History)
4 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jake Archibald 2018-05-29 06:42:28 PDT
Spec change: https://github.com/whatwg/fetch/pull/560.
Tests: https://github.com/web-platform-tests/wpt/pull/10348.
Security issues to pay attention to: https://github.com/whatwg/fetch/issues/144#issuecomment-368040980

This spec change means that rage requests (such as those from media elements) are allowed to pass through a service worker as long as they aren't modified. This fixes a long standing issue where media elements behave oddly if intercepted by a service worker (as the range headers were lost).

How media elements ingest partial responses remains unspecified for now. See the attacks in https://github.com/whatwg/fetch/issues/144#issuecomment-368040980 & their mitigations. Attack 4 is already covered in the tests.
Comment 1 youenn fablet 2018-05-29 11:24:45 PDT
This would solve https://bugs.webkit.org/show_bug.cgi?id=184447
Comment 2 youenn fablet 2019-10-23 07:16:45 PDT

*** This bug has been marked as a duplicate of bug 184447 ***