Skip to content

Safari does not forward Secure cookies in localhost #41366

@rofael-dd

Description

@rofael-dd

MDN URL

https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies

What specific section or headline is this issue about?

Block access to your cookies

What information was incorrect, unhelpful, or incomplete?

"A cookie with the Secure attribute is only sent to the server with an encrypted request over the HTTPS protocol. It's never sent with unsecured HTTP (except on localhost)"

What did you expect to see?

WebKit will not forward Secure cookies to http://localhost

Do you have any supporting links, references, or citations?

https://bugs.webkit.org/show_bug.cgi?id=281149
https://github.com/WebKit/WebKit/blob/main/Source/WebCore/loader/CookieJar.cpp#L64

Do you have anything more you want to share?

I'm not sure if MDN documents bugs or broken implementations on certain platforms, but I'd assume this falls under Browse compatibility. I'd also change it myself but I'm not exactly sure how these are supposed to be formatted.

MDN metadata

Page report details

Metadata

Metadata

Assignees

No one assigned

    Labels

    Content:HTTPHTTP docsaccepting PRFeel free to open a PR to resolve this issue

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions