The results dashboard[1] shows failures for iOS, Catalina and GLIB ports: 17 FAIL Access-Control-Allow-Credentials: true%0B should be disallowed (async) assert_unreached: onload Reached unreachable code 18 FAIL Access-Control-Allow-Credentials: true%0C should be disallowed (async) assert_unreached: onload Reached unreachable code [1] https://results.webkit.org/?suite=layout-tests&test=imported%2Fw3c%2Fweb-platform-tests%2Fcors%2Fcredentials-flag.htm
Actually, these two conditions are passing on most ports (and still failing on Mojave). Indeed wpt.fyi shows these conditions passing for WebKitGTK and failing for Safari on Mojave: [1] https://wpt.fyi/results/cors/credentials-flag.htm?label=master&product=chrome%5Bexperimental%5D&product=edge%5Bexperimental%5D&product=firefox%5Bexperimental%5D&product=safari%5Bexperimental%5D&product=webkitgtk&aligned The original bug for this test (bug191102) was closed as invalid, citing the field parsing issue to be related to CFNetwork.