Bug 324771 – Inclusion of adsrvr.org in IS_REQUEST_UNCONDITIONALLY_BLOCKABLE domain list

• Status: NEW
• Component: Page Loading

[Ian Meyers]

Created attachment 481466 [details]
Various requests blocked on iOS27 on a yahoo.com article; non-private browsing

[This](https://github.com/WebKit/WebKit/pull/58670/changes) Webkit PR (https://bugs.webkit.org/show_bug.cgi?id=307853) introduced unconditional blocking to Webkit/Safari, which bundled the following in Safari 27: 

```
tainted.example   
uidapi.com        
adsrvr.org        
id5-sync.com      
eu-1-id5-sync.com 
rlcdn.com         
pippio.com        
permutive.com     
ad.gt  
```

The intent seems to be to hard block domains that power "post-cookie" identity. However, adsrvr.org is The Trade Desk's core ad request and delivery domain, not identity. The `match` subdomain operates on the basis of legacy third-party cookies. 

Happy to provide more detail on the domain and appreciate your input.

[John Wilander]

Thanks for filing, Ian! I also got your email. We're investigating.

[Ian Meyers]

Thanks, John! If you have an ETA on your findings/feedback, that would be appreciated.

[John Wilander]

I will let you know if and when any changes are available for you to test.

[Radar WebKit Bug Importer]

<rdar://problem/188653580>