Speaking about Safari bugs I got concerned with lately: you cannot use Content-Security-Policy if you use web sockets with Safari: https://bugs.webkit.org/show_bug.cgi?id=201591
I don’t understand why this doesn’t get more attention.
It is just infuriating if you can’t use a security feature, just because some browser doesn’t follow the specs correctly. Oh well, time repeats itself just like with IE.
And just for a moment we thought we are behind all of this.