Safari 18.2 repeats Authorization header when it reloads

Safari & Web General
tansy OP
Created Dec ’24
Replies 2
Boosts 2
Views 416
Participants 3

Safari 18.2 on Sequoia 15.2 sends repeated Authorization header when iCloud Relay is enabled and the page is reloaded.

  1. Inside Safari Preferences -> Privacy -> Hide IP address -> from Trackers and Websites (ensure this is enabled)

  2. Visit a website that uses HTTP Authorization and authenticate oneself

  3. Reload website a couple of times and it will result in an HTTP 400 error due to repeat Authorization header sent by Safari

Replies  2
Boosts  2
Views  416
Participants  3
LuckyLuke42 OP
Dec ’24

Version 18.2 (20620.1.16.11.8) The issue replicates regardless of iCloud Relay settings

0
afunix OP
Jan ’25

I thought I'm going crazy. Safara 18.2 (20620.1.16.11.8) sends multiple duplicates of Authorization Basic headers. Disabling "Safari Preferences -> Privacy -> Hide IP address" actually helped.

0
Safari 18.2 repeats Authorization header when it reloads
First post date Last post date
 
 
Q