NEW 201457
Browser history includes the POST redirect page in the history on latest iOS versions 
https://bugs.webkit.org/show_bug.cgi?id=201457
Summary Browser history includes the POST redirect page in the history on latest iOS ...
pablobart+bugzilla
Reported 2019-09-04 06:29:33 PDT
The behaviour of the back history has changed on the latest iOS versions 12.4 (as well as the current 13.0 beta) compared with iOS 12.1 or previous iOS versions (tested on 12.1, 11.4 and 10.3.2) when loading a website doing a POST redirect by submitting a form. Example page with a POST redirect (PRG): <html> <body> <form id="sso" method="POST" action="https://httpstat.us/303"> <input type="hidden" name="test" value="test-value" /> </form> <script> document.getElementById('sso').submit(); </script> </body> </html> On the latest iOS versions, the website doing the POST is added to the history, therefore navigating back is showing that 'empty' page. On previous iOS versions that page was not added to the history. I wasn't able to locate exactly the version where this behaviour changed, but here are two user agents that have different behaviour: An user agent that is adding the website to the history: Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Mobile/15E148 Safari/604.1 User agent that is not adding the website to the history: Mozilla/5.0 (iPhone; CPU iPhone OS 10_3_1 like Mac OS X) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.0 Mobile/14E8301 Safari/602.1
Attachments
Add attachment proposed patch, testcase, etc.
pablobart+bugzilla
Comment 1 2019-09-04 08:39:09 PDT
To narrow even more when that behaviour changed, this User-Agent doesn't add the website doing the POST to the history: Mozilla/5.0 (iPhone; CPU iPhone OS 12_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1
Radar WebKit Bug Importer
Comment 2 2019-09-07 12:36:41 PDT
<rdar://problem/55148915>
Note You need to log in before you can comment on or make changes to this bug.