Alex Christensen

Allow protocol setter to switch between special and non-special schemes

17

Chrome, Firefox, and Safari all agree on this behavior: `u = new URL("custom-scheme://host?initially-no-path");` `u.protocol = "https";` `u.protocol = "custom-scheme";` `u.href; // custom-scheme://host/?initially-no-path` Even though it is a little strange, I...

Allow ports in file URLs

14

Currently, with the test URL file://example:1/ we have three different behaviors: 1. Firefox will remove the host and return file:/// 2. Chrome does not allow the port and throws an...

#### 16b25f328811826e2e58a8982f50e77bf79e5cc2 ITP should not remove service workers for 90 days after interaction if a WebPush service worker is registered https://bugs.webkit.org/show_bug.cgi?id=243469 <rdar://92694600> Reviewed by NOBODY (OOPS!). * Source/WebKit/NetworkProcess/Classifier/ResourceLoadStatisticsDatabaseStore.cpp: (WebKit::ResourceLoadStatisticsDatabaseStore::addHasPushRegistrationColumnIfNecessary): (WebKit::ResourceLoadStatisticsDatabaseStore::openAndUpdateSchemaIfNecessary):...

Restrict PerformanceServerTiming and PerformanceResourceTiming.{transferSize,encodedBodySize,decodedBodySize} to same site requests

3

#### f4749b3f681109afd415fce4b99b092d9403386d Restrict PerformanceServerTiming and PerformanceResourceTiming.{transferSize,encodedBodySize,decodedBodySize} to same site requests https://bugs.webkit.org/show_bug.cgi?id=245501 <rdar://100236084> Reviewed by NOBODY (OOPS!). * Source/WebCore/loader/ResourceTiming.cpp: (WebCore::ResourceTiming::ResourceTiming): (WebCore::ResourceTiming::populateServerTiming const): * Source/WebCore/loader/ResourceTiming.h: (WebCore::ResourceTiming::isSameSiteRequest const): * Source/WebCore/page/PerformanceResourceTiming.cpp: (WebCore::PerformanceResourceTiming::transferSize const): (WebCore::PerformanceResourceTiming::encodedBodySize...

Move PrivateClickMeasurement nested classes to separate headers and generate serializers

5

#### a8b856287c1187705eddba56dc6ce0d374206e16 Move PrivateClickMeasurement nested classes to separate headers and generate serializers https://bugs.webkit.org/show_bug.cgi?id=245515 <rdar://100257715> Reviewed by NOBODY (OOPS!). * Source/WebCore/Headers.cmake: * Source/WebCore/Sources.txt: * Source/WebCore/WebCore.xcodeproj/project.pbxproj: * Source/WebCore/html/HTMLAnchorElement.cpp: (WebCore::HTMLAnchorElement::attributionSourceNonceForPCM const): (WebCore::HTMLAnchorElement::parsePrivateClickMeasurementForSKAdNetwork const):...

Remove unused serialization code

7

#### 984285a5235539672dc102af11e6d946720dbc5a Remove unused serialization code https://bugs.webkit.org/show_bug.cgi?id=245204 Reviewed by NOBODY (OOPS!). * Source/WTF/wtf/Seconds.h: * Source/WTF/wtf/URL.h: * Source/WebKit/Platform/IPC/ArgumentCoders.cpp: (IPC::ArgumentCoder<WallTime>::decode): (IPC::ArgumentCoder<AtomString>::decode): (IPC::ArgumentCoder<String>::decode): (IPC::ArgumentCoder<SHA1::Digest>::decode): (IPC::ArgumentCoder<CString>::encode): Deleted. (IPC::ArgumentCoder<CString>::decode): Deleted. (IPC::ArgumentCoder<StringView>::encode): Deleted. (IPC::ArgumentCoder<audit_token_t>::encode): Deleted. (IPC::ArgumentCoder<audit_token_t>::decode):...

Call setMostRecentWebPushInteractionTime when a web push is interacted with successfully

1

#### bb614cad61c2627893ae108142114c5d05f465d7 Call setMostRecentWebPushInteractionTime when a web push is interacted with successfully https://bugs.webkit.org/show_bug.cgi?id=246468 rdar://101133602 Reviewed by NOBODY (OOPS!). * Source/WebKit/NetworkProcess/Classifier/ResourceLoadStatisticsDatabaseStore.cpp: (WebKit::ResourceLoadStatisticsDatabaseStore::destroyStatements): (WebKit::ResourceLoadStatisticsDatabaseStore::mostRecentWebPushInteractionTime const): Deleted. * Source/WebKit/NetworkProcess/Classifier/ResourceLoadStatisticsDatabaseStore.h: * Source/WebKit/NetworkProcess/ServiceWorker/WebSWServerToContextConnection.cpp: (WebKit::WebSWServerToContextConnection::firePushEvent): *...

Add check that request's firstPartyForCookies is reasonable

3

#### 457a7e50e6d1d47d99ef4272e8c5a016981165ee Add check that request's firstPartyForCookies is reasonable https://bugs.webkit.org/show_bug.cgi?id=246504 Reviewed by NOBODY (OOPS!). * Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp: (WebKit::NetworkConnectionToWebProcess::scheduleResourceLoad): https://github.com/WebKit/WebKit/commit/a51db29654edaf354eda17e83d271f3696bfd389 | Misc | iOS, tvOS & watchOS | macOS | Linux |...

Doing so would prevent a side-channel to gather data even from origins that send TAO headers. Similar to https://github.com/w3c/server-timing/issues/89 which proposes a similar restriction for Server Timing.

Reflect changes in GB 18030-2022

5

https://encoding.spec.whatwg.org/index-gb18030.txt contains 18 code points that have been changed by GB 18030-2022. We should probably update.