1414164 - Add Telemetry for Nested Permissions

Status: RESOLVED DUPLICATE of bug 1345077

(Core :: DOM: Security, enhancement, P3)

Description

[Tom Ritter [:tjr] (OOTO until 4/30 at least)]

We'd like to understand how often each permission is requested by third party origins, and how often that permission is granted. This situation is quite weird from a user perspective and it's not apparent what you grant in all cases.

Chrome investigated this:
https://docs.google.com/document/d/1iaocsSuVrU11FFzZwy7EnJNOwxhAHMroWSOEERw5hO0/edit
https://noncombatant.github.io/permission-delegation-api/#bib-iframe-permissions-chrome

And found that it was very rare. We could consider disabling this entirely if we found it was very rare. Even if we don't want to disable it, knowing its occurrence will help us decide what to do in First Party Isolation and Resist Fingerprinting modes.

Comment 1

[Johann Hofmann [:johannh]]

I'm adding probes for this in bug 1345077 (along with secure origin and handling user input).

I'm not planning to add deny/granted to these prompts, because I don't really see how that information would be useful to us.

Would you like to dupe this bug or keep it open and specialize on getting more info on third party origins (such as deny/grant ratio)?

Comment 2

[Tom Ritter [:tjr] (OOTO until 4/30 at least)]

That's great, thanks!