1883145 - crossOriginIsolated false in service worker when it should be true

Status: UNCONFIRMED

(Core :: DOM: Service Workers, defect, P2)

Description

[3838shah]

Attachment: Screenshot_20240301_171217.png

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36

Steps to reproduce:

--- with demo ---
go to https://anura.pro
Pass initial setup (just click normal user)
Open "About browser" if using example site
enter URL

--- without demo ---
serve a cors isolated page with headers
"Cross-Origin-Embedder-Policy: require-corp
"Access-Control-Allow-Origin: *
"Cross-Origin-Opener-Policy: same-origin
"Cross-Origin-Resource-Policy: same-site
and a service worker which checks for crossOriginIsolated
service worker will get false when should be true

Actual results:

Failure (Page blocked message) as "crossOriginIsolated" in the service worker at this line https://github.com/titaniumnetwork-dev/Ultraviolet/blob/c963d4511febcca6249e22d46227f2813d35935a/src/uv.sw.js#L269 shows up as false despite all assets being served with appropriate headers

Expected results:

Website should navigate in "about browser" app like behavior in webkit and blink

Comment 1

[3838shah]

https://imgur.com/a/DAqXASc issue in firefox dev tools (discrepancy in crossOriginIsolated)

Comment 2

[3838shah]

Attachment: Discrepancy in crossOriginIsolated

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Service Workers' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 4

[Eden Chuang[:edenchuang]]

ni me for find time to take a look on this issue.