New issue
Advanced search Search tips

Issue 870946 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Closed: Aug 17
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 3
Type: Bug



Sign in to add a comment

Steam store videos can't play if out of blink CORS enabled

Reported by khym.cha...@gmail.com, Aug 4

Issue description

UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36

Example URL:
https://store.steampowered.com/app/427520/Factorio/

Steps to reproduce the problem:
1. Go to chrome://flags/#out-of-blink-cors to enable out of blink CORS and restart the browser.
2. Go to a store.steampowered.com app page with a video.

What is the expected behavior?
The video plays.

What went wrong?
The video doesn't play.  The JavaScript console has a few errors like:

Failed to load https://steamcdn-a.akamaihd.net/steam/apps/256660595/movie480.webm?t=1455896504: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://store.steampowered.com' is therefore not allowed access.

Did this work before? N/A 

Chrome version: 68.0.3440.84  Channel: stable
OS Version: Fedora 28
Flash Version: 

Attached is a HAR file and a NetLog file of when the problem happened (both created at the same time from the same page refresh).

The only thing I've found that fixes the problem is disabling the out of blink CORS experiment.

Things that didn't fix the problem:

* Viewing the video under a brand new profile.
* Clearing all non-cookie site data with the devtool's application tab.
* Clearing the browser's entire cache.
 
steam-net-export-log.json.bz2
35.3 KB Download
steam.har.bz2
4.9 MB Download
Labels: Needs-Triage-M68
Components: -Internals>Network Blink>SecurityFeature>CORS
Cc: toyoshim@chromium.org yhirano@chromium.org
Labels: -Pri-2 Needs-Feedback Pri-3
Thank you for reporting. Please note that the feature is under development.

It seems working on ToT. can you test with the newest Canary?
Owner: yhirano@chromium.org
Status: Assigned (was: Unconfirmed)
assigning to yhirano@ for the time being to get it out of the triage queue
Status: WontFix (was: Assigned)

Sign in to add a comment