Matthew Finkel

Results 25 issues of Matthew Finkel

WebKit export from bug: [Allowlisting empty elements via content hashes in CSP directives is inconsistent across browser engines](https://bugs.webkit.org/show_bug.cgi?id=233071)

content-security-policy
webkit-export

WebKit export from bug: [Fix error in WPT CSP test on timeout](https://bugs.webkit.org/show_bug.cgi?id=243057)

content-security-policy
webkit-export

#### 3744679d83abeb4b4ed3d9bb82a3d2d88038f9f3 Partition sessionStorage by top-level origin https://bugs.webkit.org/show_bug.cgi?id=210776 rdar://57674840 Reviewed by NOBODY (OOPS!). A page could access its origin's sessionStorage in both first-party and third-party contexts. This differs from other...

merging-blocked

**Which part of the project should be enhanced?** Guest/anonymous sessions are assigned a Guest name, however this name is not editable (afaics). **Is your enhancement request related to a problem?...

type: feature

#### 1d2a73cbfbea6509a6bd4b010e720b404e5e10d0 Remove WebArchiveDebugMode https://bugs.webkit.org/show_bug.cgi?id=245488 <rdar://problem/88406961> Reviewed by NOBODY (OOPS!). Original patch by: Kate Cheney <[email protected]> Remove use case of WebArchiveDebugMode and deprecate it now that it is no longer...

merging-blocked

#### a820369f98280ab3662d920b9b2c6e4f46faa0fe REGRESSION (Safari 16 beta, STP): WebArchive can't be loaded https://bugs.webkit.org/show_bug.cgi?id=242687 <rdar://96970629> Reviewed by NOBODY (OOPS!). Relative resource paths were not correctly resolved when loaded from WebArchives. For example,...

merging-blocked

#### c819fbe23828dfd8e5adc2352304c52cd208d17a REGRESSION (r293427): Scrivener 3: Images on web pages are not rendered https://bugs.webkit.org/show_bug.cgi?id=245141 rdar://97580190 Reviewed by NOBODY (OOPS!). Add LinkedOnOrAfter condition for deciding if WebArchives should be considered as...

merging-blocked

## Request for position on an emerging web specification ### Information about the spec * Spec Title: Opaque Response Blocking (ORB, aka CORB++) * Spec URL: https://whatpr.org/fetch/1442.html * GitHub repository:...

topic: loading
topic: security
topic: http
venue: WHATWG Fetch Workstream
venue: none / personal repository
from: Google
from: Apple
from: Mozilla

#### e6b6f75589149026a96389b9a9cd875ba0cbdb43 Simplify handling addGrant result when granting storage access https://bugs.webkit.org/show_bug.cgi?id=270208 rdar://123728856 Reviewed by NOBODY (OOPS!). In 271821@main I added support for granting storage access for a group of domains....

merging-blocked
Page Loading

#### 8e4cb4d98bd9f215669f78c13828f10021914542 Initialize organization storage access prompt quirks if needed https://bugs.webkit.org/show_bug.cgi?id=270206 rdar://123728311 Reviewed by NOBODY (OOPS!). The API tests I added in 271821@main directly initialize the cache, but in reality...

Page Loading