Bug 218705

Summary:	No cookies access for extension pages opened through browser.windows.create or in iframe
Product:	WebKit	Reporter:	Rustem <winlinx>
Component:	Page Loading	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED INVALID
Severity:	Critical	CC:	beidson, sihui_liu, smoley, wilander
Priority:	P2
Version:	Safari 14
Hardware:	Mac
OS:	All

Description Rustem 2020-11-09 06:08:20 PST

This bug releated to Web Extensions in Safari 14.

When I try to open a window with browser.windows.create (or include an iframe on page) pointing to my index.html and inside of it I make an API requests to host (https) that explicitly specified in permissions manifest field, the cookies are not send to this host.

So in other words I can't do API requests to my own server from such windows. This works only from browser_action popover.

This behaviour differs from all other browsers, they allow to do this.

Comment 1 Smoley 2020-11-09 11:40:57 PST

Thanks for filing. Safari Web Extensions issues are not typically tracked on bugs.WebKit.org.

Please file this feedback via feedbackassistant.apple.com.