Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: c5cf4420bc5816dbb4a9128fce5f71aa0782af04
https://github.com/WebKit/WebKit/commit/c5cf4420bc5816dbb4a9128fce5f71aa0782af04
Author: Yoav Weiss <[email protected]>
Date: 2026-07-07 (Tue, 07 Jul 2026)
Changed paths:
A
LayoutTests/http/wpt/storage-access/request-storage-access-under-opener-cross-site-opener-expected.txt
A
LayoutTests/http/wpt/storage-access/request-storage-access-under-opener-cross-site-opener.html
A LayoutTests/http/wpt/storage-access/resources/opener-iframe.html
A LayoutTests/http/wpt/storage-access/resources/popup.html
M Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp
Log Message:
-----------
Stop enforcing that the opener origin has access to first party cookies.
https://bugs.webkit.org/show_bug.cgi?id=318772
Reviewed by Charlie Wolfe.
The current code checks that the opener's domain has first-party cookie access.
There's no reason why the opener's domain needs that access, and there are
cross-origin opener scenarios
where this is not the case. Currently those scenarios result in a crash.
This PR removes that check to prevent these crashes, and adds relevant tests.
Test:
http/wpt/storage-access/request-storage-access-under-opener-cross-site-opener.html
*
LayoutTests/http/wpt/storage-access/request-storage-access-under-opener-cross-site-opener-expected.txt:
Added.
*
LayoutTests/http/wpt/storage-access/request-storage-access-under-opener-cross-site-opener.html:
Added.
* LayoutTests/http/wpt/storage-access/resources/opener-iframe.html: Added.
* LayoutTests/http/wpt/storage-access/resources/popup.html: Added.
* Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp:
(WebKit::NetworkConnectionToWebProcess::requestStorageAccessUnderOpener):
Canonical link: https://commits.webkit.org/316624@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
