[GitHub] [cordova-ios] breautek commented on issue #1228: Cookies are blocked in iframe even after disabling ITP

[GitBox <gi...@apache.org>]

breautek commented on issue #1228:
URL: https://github.com/apache/cordova-ios/issues/1228#issuecomment-1081397548


   Iframes don't have access to the storage api by default, which is required to handle ITP.
   
   Iframes that is a direct child of the top level frame have an attribute to enable the storage access api. Direct child iframes can have
   
   `sandbox="allow-storage-access-by-user-activation"` to enable storage access.
   
   From what I read, iframes in which is nested do not have storage access, even with the sandbox attribute.
   
   Note that if either the top frame or the iframe document navigates, storage access is revoked. Any storage grants only persists for the lifetime of the document.
   
   Disclaimer: don't have the means to confirm or test any of this. Just summarizing [webkits blog](https://webkit.org/blog/8124/introducing-storage-access-api/)
   
   Also there are some cookie bugs that is unrelated to ITP in WKWebView, which was reported to Apple via https://bugs.webkit.org/show_bug.cgi?id=213510 which I think effects ios <= 13. Your reproduction on ios 12.4, while show similar symptoms is likely related to cookie syncing issues on wkwebview. I believe these are fixed in later ios versions (but I don't work cookies so not sure on the exact details here on this.)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org