33248510437
85%
master: 85%

Ran 29 Aug 2026 10:45AM UTC

Jobs 1

Files 54

Run time 1min

Badge

Embed ▾

Committed 29 Aug 2026 10:44AM UTC coverage: 85.427%. Remained the same

Build # 33248510437

Build Type

Pull #2223

github

Committed by

paskal

Commit Message

Correct three passages the browser results contradict

The Partitioned paragraph said AUTH_SEND_JWT_HEADER closes the gap a
third-party-blocking browser opens. Firefox's "block all third-party
cookies" discards partitioned cookies too, as the page says three
paragraphs later, so the flag closes nothing in that mode.

The first two combination bullets said authorisation works nowhere but the
install domain and its subdomains. Measured on the rig, that is wrong for
Firefox: with neither variable set, anonymous and email both survive a
reload cross-domain on Firefox's defaults, because it stores the server's
attribute-less cookie in a per-site partition instead of refusing it.
Chromium on the same rig and the same instance does not survive, which is
the control that makes the Firefox result mean something.

The cookie-jar dump did not name its browser. The four rows are Chromium on
its default policy: they cannot be Firefox, where the HttpOnly overwrite
rule stops the widget writing its own JWT at all.

Pull Request Pull Request #2223: Measure the Safari column on Safari, and fix two sentences it makes false

Coverage Stats

6665 of 7802 relevant lines covered (85.43%)

38.25 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	33248510437.1	29 Aug 2026 10:45AM UTC	54	85.43	GitHub Action Run

umputun / remark42 / 33248510437
85%
master: 85%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 33248510437

umputun / remark42 / 33248510437 85% master: 85%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 33248510437

umputun / remark42 / 33248510437
85%
master: 85%

README BADGES
x