Issue metadata
Sign in to add a comment
|
Third party cookies don't seem to be working in ios Chrome 60
Reported by
jrw10...@gmail.com,
Aug 30 2017
|
||||||||||||||||||||
Issue descriptionSteps to reproduce the problem: 1. Open site that has iFrame that will set 3rd party cookies 2. Interact in a way that causes the 3rd cookies to be set. For example VisaCheckout sets cookies when you use it to improve user experience for its returning users. 3. Reload the page, and any behavior that depends on 3rd party cookies does not work. It's as if they were not set. What is the expected behavior? 3rd parties should be able to set cookies when their site is loaded in an iFrame. What went wrong? It appears that iOS chrome does not allow setting 3rd party cookies as of version 60. The behavior works in all versions of desktop chrome, as well as iOS Safari. Did this work before? Yes 59.x Does this work in other browsers? Yes Chrome version: 60.0.3112.89 Channel: stable OS Version: iOS 10.3.2 (14F89) Flash Version: Since there is no access to chrome devtools in iOS chrome the first party page cannot grab the cookies of a 3rd party domain and dump them to the page, we have no definitive way of knowing that these cookies are not working. We just know that none of our cookie dependent behavior works. We also tested with iOS Chrome beta version 61 and it does not work either.
,
Oct 25 2017
More obvious steps to reproduce: 1. on iOS navigate to settings->Safari->Block Cookies, choose "Always Allow". 2. Navigate to https://usa.visa.com/pay-with-visa/visa-checkout.html (this website has good visual difference when 3rd party cookies are blocked or not). actual.png -- when 3rd cookies are blocked good.png -- when 3rd party cookies are allowed Expected: good.png Actual: actual.png On Safari it changes depends on cookies settings. On Chrome is's always as actual.png. I have no issues on iOS 9.3.5 on Any version of Chrome, so it seems it's not about Chrome version, but it's about webkit version. On this device webkit is 601.1.46 I always have issues (3rd party cookies are always blocked) on any OS, on any Chrome with Webkit 602.1.50 or higher. mrefaat, it looks like external dependency?
,
Nov 2 2017
,
Jan 30 2018
Mohammad, please comment on this bug
,
Jan 30 2018
I can't reproduce this on ios 11 - Chrome 64 & Chrome canary with cookies enabled. I believe the website changed their mobile website - even when i block the cookies safari still the correct version appears in the website. Will see if there is a way to test that on different website or will create a test case for it
,
Mar 5 2018
,
Mar 28 2018
,
Jul 25
The customer of case ID: 13957339 created a new case ID: 16450972 to ask for the current status of this issue. Can you please confirm if any feasible ETA on this issue soon ?
,
Jul 30
Eugene: what are next steps here? It doesn't appear we can repro this from our end (or at least we couldn't in January).
,
Jul 30
I'd i believe this is not an issue any more (this is handled by the WKWebview and i wasn't able to reproduce anyway), we should close the bug. If any new reports came we can at least get a website to be able to reproduce.
,
Jul 31
,
Oct 1
This issue is still reproducible on iOS Chrome Version: 69.0.3497.105 iOS version:12 "Prevent cross-site tracking" disabled in Safari settings Easy way to test - Visit whatismybrowser.com and check Third-party cookies section Or https://en.support.wordpress.com/third-party-cookies/ and look under "Checking your browser..." There seems to be no way to enable third-party cookies in Chrome, while they work in Safari at the same time.
,
Oct 1
Unfortunately we don't have a way to make third-party cookies work on Chrome. There is an outstanding webkit bug for that: https://bugs.webkit.org/show_bug.cgi?id=140205
,
Oct 2
WebKit bug is about blocking third party cookie. Unless I miss something, I think this bug is about setting 3rd party cookie.
,
Oct 2
The bug is about being able to set the cookie policy in WKWebView, so that would cover multiple cases: Bug 140205 : WKWebView does not provide a way to set cookie accept policy <https://bugs.webkit.org/show_bug.cgi?id=140205>
,
Oct 2
Agreeing with comment# 15, The default cookie accept policy seem to block third party cookies, i created a sample wkwebview to verify that. and when using [pool performSelector:NSSelectorFromString(@"_setCookieAcceptPolicy:") withObject: NSHTTPCookieAcceptPolicyAlways]; It was able to accept third party cookies.
,
Oct 2
Interesting. Did we have "Allow 3rd party cookie" as default on iOS 11 and now "Block 3rd party cookie" is default on iOS 12? Unfortunately a lot of web sites rely on 3rd party cookie to function, so having "Block" as default will break those sites.
,
Oct 2
may be at some point it was default but i'm testing on iOS 11.4 and it seem to have block as default. and that's the case on all iOS browsers other than Safari
,
Oct 2
,
Oct 3
Thanks mrefaat@ and eugenebut@. Any way we can change the default behavior to allow (as mentioned in c#16)? Or, allow users to adjust it via a flag in the Chrome browser on iOS? As I understand, most modern browser will have third party cookie enabled by default for tracking and authentication purposes.
,
Oct 3
Unfortunately WKWebView does not provide public API to change cookie accept policy. And calling private API (like _setCookieAcceptPolicy:) is not allowed by AppStore guidelines. My guess is that all iOS browsers (except Safari) do not allow 3rd party cookies on iOS 12. Safari have more control over cookie policy.
,
Oct 12
Apologies for the frequent ping but is there an update from WebKit's end on this issue? An enterprise customer of ours is asking for an update.
,
Oct 12
> Apologies for the frequent ping but is there an update from WebKit's end on this issue? > An enterprise customer of ours is asking for an update. Updates will be made in this bug, which is open to the public: <https://bugs.webkit.org/show_bug.cgi?id=140205> If the enterprise customer has their own contact within Apple's WWDR organization, they should file a radar via https://bugreport.apple.com/ and/or contact WWDR to let them know they are interested in this feature. (Providing the bugs.webkit.org bug number in their radar and/or through contact with WWDR will make sure the correct issue is being discussed.)
,
Jan 11
Hello! This bug is receiving this notice because there has been no acknowledgment of its existence in quite a bit of time. - If you are currently working on this bug, please provide an update. - If you are currently affected by this bug, please update with your current symptoms and relevant logs. If there has been no updates provided by EOD Thursday, 01/17/19 (5pm EST), this bug will be archived and can be re-opened at any time deemed necessary. Thank you!
,
Jan 11
No one is actively working on this bug. The bug can not be fixed in Chrome. Why do we want to Archive the bug? ExternalDependency seems like more reasonable Status for a bug which requires WebKit changes.
,
Jan 11
Thanks for the update. This bug was selected as part of a process to close/resolve any bugs that aren't actively being worked on but have been left open. Since this is a P1 I was hoping to get some sort of update on if this is still actively being worked on. If this is no longer a P1 issue it may be best to lower the priority to something more appropriate. Please let me know if you have any other questions or if there's anything I can do to help continue to make progress on this!
,
Jan 11
Thanks for the explanation. Removing milestone and lowering priority, since the bug can't be fixed for M-70 anyways.
,
Jan 11
Thanks again, eugenebut. Would you happen to know if there's any sort of ETA on when a fix can be expected?
,
Jan 11
Apple never comment on future releases, and it's unclear if fixing the bug is even a priority for them. |
|||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||
Comment 1 by huangml@chromium.org
, Aug 31 2017Owner: mrefaat@chromium.org
Status: Assigned (was: Unconfirmed)