Closed Bug 1266634 Opened 9 years ago Closed 2 years ago

Rate limit permission requests from sites that ask too many times

Categories

(Firefox :: Site Permissions, defect)

defect

Tracking

()

RESOLVED FIXED

People

(Reporter: lina, Unassigned)

References

Details

If a site asks for a particular permission, and the user repeatedly ignores the request, we should automatically deny it for the session. We can use heuristics to determine acceptable usage, and set the threshold accordingly. For example, we could be more lenient for permission requests in response to user interaction, or pages that the user visits more frequently, as opposed to drive-by requests on page load. It sounds like Chrome has a global blacklist of origins where users don't grant permissions. This wouldn't be as sophisticated, but it's a step toward encouraging sites to do the right thing.
Severity: normal → S3
Component: Notifications and Alerts → Site Permissions
Product: Toolkit → Firefox

Not sure at what point it got added but we do block permission requests for the session when the user denies the prompt. This is driven by TemporaryPermissions in SitePermissions.sys.mjs. I would consider this bug resolved.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.