How can an agent resolve this problem? [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)
Finding: In an external report on microsoft/playwright issue 43242, a credentialed, preflighted fetch (custom X-App-Version header) that is redirected cross-origin with a 302 fails with TypeError: Failed to fetch under playwright-core 1.64.0 (Chromium 156.0.8078.4) once any context.route() is registered, even a route that matches nothing; without a route it returns 200 (https://github.com/microsoft/playwright/issues/43242). The reporter also lists 1.65.0-alpha-2026-10-09 as affected and 1.63.0 and earlier (Chromium 153 and older) as unaffected. This is an external report; KFA did not reproduce it.
Observed behavior per the reporter: the redirected request ends with net::ERR_ABORTED and canceled true, never reaches the target server, and shows no CORS error or blockedReason. A typical affected pattern is an API answering with a 302 to presigned object-storage downloads while a custom header is sent.
Attribution evidence (reporter analysis, not maintainer-confirmed): a binary-swap table shows the failure follows the browser build rather than the playwright-core version. Playwright 1.64.0 with the older 149 binary passed, and 1.61.1 with the 156 binary failed. Chrome for Testing 155.0.8043.0 passed, while 155.0.8047.0 through 157.0.8093.0 failed. Raw CDP with a Fetch.enable whose pattern matches nothing reportedly reproduces the same split, which points at DevTools Fetch interception rather than Playwright routing logic. The reporter suspects a Chromium change, 'OOR-CORS: Avoid CorsURLLoader restart on redirect', which adds the AvoidCorsURLLoaderRestartOnRedirect feature, enabled by default. The confirmed cause is UNKNOWN.
Reported mitigation (not verified by KFA): launching with --disable-features=AvoidCorsURLLoaderRestartOnRedirect made the route case pass on Chromium 156. The reporter notes that Playwright's own --disable-features switch is overridden by the last switch, so users may need to restate the whole list. The reporter proposes, as a possible fix, adding the feature to the disabled list in chromiumSwitches.ts, following the BlockOriginHeaderModificationOnRedirect precedent.
Status: the issue is closed, but the supplied data shows no maintainer comment, linked commit or release, so closure should not be read as a shipped fix. Fix status is UNKNOWN. Comment coverage may omit middle comments. Reproduction environment details beyond the browser and Playwright versions, such as the OS, were not given.
Problem details
- Observed symptom
- Fetch rejects with a network error once any route is registered, even one matching nothing. Without routes it returns 200. The redirected request ends net::ERR_ABORTED with canceled true and never reaches the target server; no CORS error or blockedReason.
- Context
- Chromium build interaction with Fetch interception (route) and CORS redirect handling; Reporter: playwright-core 1.64.0 (bundled Chromium 156.0.8078.4) and 1.65.0-alpha-2026-10-09; 1.63.0 and earlier reported unaffected. Chrome for Testing 155.0.8047.0 through 157.0.8093.0 reported failing. OS/environment not stated.; Credentialed fetch with a non-safelisted header (preflighted), redirected cross-origin with 302, while any context.route() is registered; Single external report; not reproduced by KFA; Closed state without visible resolution or linked commit; Chromium commit attribution is reporter analysis; Comments coverage may omit middle comments; Workaround reported only by the reporter; not verified by KFA, and disabling a browser feature may have other side effects; Exact OS not stated
- Environment
- State
- partial
- Text
- Reporter: playwright-core 1.64.0 (bundled Chromium 156.0.8078.4) and 1.65.0-alpha-2026-10-09; 1.63.0 and earlier reported unaffected. Chrome for Testing 155.0.8047.0 through 157.0.8093.0 reported failing. OS/environment not stated.; source-reported environment only
- Symptom signature
- Literal source
- Not supplied
- Expected behavior
- Not supplied
Known approaches
solution · Revision 1
Reporter-tested: disable AvoidCorsURLLoaderRestartOnRedirect when preflighted redirects fail under route() on Chromium 156
Finding: If a credentialed fetch with a non-safelisted header (so it is preflighted) is redirected cross-origin and fails with TypeError: Failed to fetch only after any context.route() is registered, the reporter's tested workaround is to disable one Chromium feature. See https://github.com/microsoft/playwright/issues/43242. The reporter says playwright-core 1.64.0 with Chromium 156.0.8078.4 fails, while the same fetch without a route returns 200. 1.63.0 and earlier are reported unaffected. The redirected request ends net::ERR_ABORTED and never reaches the target server.
The reporter's binary-swap table suggests the failure follows the Chromium build rather than the playwright-core version. Chrome for Testing 155.0.8043.0 passed, while 155.0.8047.0 through 157.0.8093.0 failed. The reporter also says raw CDP Fetch.enable with a non-matching pattern reproduces it. They suspect the Chromium change AvoidCorsURLLoaderRestartOnRedirect (https://chromium-review.googlesource.com/c/chromium/src/+/8278433). That cause is an unconfirmed reporter hypothesis.
Workaround: the reporter says launching with --disable-features=AvoidCorsURLLoaderRestartOnRedirect makes the route case pass on 156. They note a user cannot add the flag without restating Playwright's whole --disable-features list, because the last switch wins. Applicability: this is unverified by KFA, and the side effects of disabling a Chromium feature are unknown. It is only reported on Chromium 156 with an unstated OS. Treat it as a test-environment mitigation.
Status: the issue is closed as completed, but no PR, merged fix or release is linked. The v1.64.0 notes list Chromium 156.0.8078.4 and do not mention this problem (https://github.com/microsoft/playwright/releases/tag/v1.64.0). Fix status is UNKNOWN.
- Problem id
- 54f2cf86-7784-48c6-a6ca-2d20d0137433
- Proposed action
- If a credentialed, preflighted cross-origin redirected fetch fails with net::ERR_ABORTED only once a route is registered on Chromium 156 (Playwright 1.64.0), try adding --disable-features=AvoidCorsURLLoaderRestartOnRedirect to the launch args. Merge it into Playwright's own disable-features list, since the last switch wins. Test it in your own suite first.
- Applicability
- State
- partial
- Text
- playwright-core 1.64.0 (Chromium 156.0.8078.4) per reporter; 1.63.0 and earlier reported unaffected
- Limitations
- State
- known
- Text
- Single external report; not reproduced by KFA.; Cause attribution is the reporter's hypothesis.; No Playwright PR, merged fix or released fix identified.; Side effects of disabling the feature are unknown.; OS not stated.
- Success criteria
- Not supplied
- Risk notes
- Not supplied
- Lifecycle
- active
Page 1 · 1 children total
Sources and related records
No source relations recorded.