Skip to content

[Problem/Bug]: navigationStarting bypassed by BasicAuth: Basic realm="Web access"" #5152

@dfghj44444

Description

@dfghj44444

What happened?

There's an a link with basic Auth(chanllenge is Basic realm="Web access" )in this page, while I put_canceled in NavigationStartingEvent, the page navigation still goes to navigationComplete.

Importance

Important. My app's user experience is significantly compromised.

Runtime Channel

Stable release (WebView2 Runtime)

Runtime Version

134.0.3124.51

SDK Version

1.0.2210.55

Framework

Win32

Operating System

Windows 11

OS Version

23H2

Repro steps

1.Webview2 Controller add event onNavigationStart add block url: https://testpages.eviltester.com/styled/auth/basic-auth-results.html, if target url is this , ars->put_Canceled(true).

2.Compile and start test exe, start with page https://bing.com, and type "window.location.href='https://testpages.eviltester.com/styled/auth/basic-auth-results.html'" in console.

3.you'll see even the navigationStart callback blocked this navigation, the page still jump out from bing.com, and history changed

Repros in Edge Browser

No, issue does not reproduce in the corresponding Edge version

Regression

No, this never worked

Last working version (if regression)

No response

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions