# WebKit in QA

A `webkit` project exists for one reason: Chromium treats `http://localhost` as a secure context and will store a
`Secure` cookie there, so a chromium-only suite passes while Safari users are bounced to the login page after
signup. That is precisely the bug reported after delivery.

The spec signs up its own account, walks the wizard's Next links, and asserts the final destination is the
onboarding gate at `/setup?step=2` — proof of a live session — because a lost session would land on `/login`.
A second spec reloads a deep page and checks the session survives.

Related: [[Session cookie rules]], [[Playwright projects]], [[First-run gate]].