Bug 274444 - Credential Management API shouldn't allow method calls on non-fully active docs
Summary: Credential Management API shouldn't allow method calls on non-fully active docs
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: Other
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Marcos Caceres
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2024-05-20 23:16 PDT by Marcos Caceres
Modified: 2024-05-24 21:18 PDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcos Caceres 2024-05-20 23:16:22 PDT 
The following CredentialContainer methods all allow operations if a document is not fully active:

.get()
.store()
.create()
.preventSilentAccess()

However, we probably shouldn't allow that. 

Spec change:
https://github.com/w3c/webappsec-credential-management/pull/230
Comment 1 Radar WebKit Bug Importer 2024-05-23 01:44:08 PDT 
<rdar://problem/128595290>
Comment 2 Marcos Caceres 2024-05-23 01:46:47 PDT 
Pull request: https://github.com/WebKit/WebKit/pull/28979
Comment 3 EWS 2024-05-24 21:18:18 PDT 
Committed 279309@main (0864a389355b): <https://commits.webkit.org/279309@main>

Reviewed commits have been landed. Closing PR #28979 and removing active labels.