1433585 - Block cookies policy does not block cookies

Status: RESOLVED WORKSFORME

(Firefox :: Enterprise Policies, defect)

Description

[Abe - QA (:Abe_LV)]

Steps to reproduce:
Screen capture- https://testing-1.tinytake.com/sf/MjMwMzYwOV83MDY1NzM1

1. Set policy as-
{
  "policies": {
    "cookies": {
      "allow": [      
      ],
      "block": [
        "https://www.cnn.com/"
      ]
    }
  }
}
 

2. Go to Preferences -> Privacy and Security -> Remove Individual Cookies
   and remove cookies
3. Go to https://www.cnn.com/
4. Close the tab of https://www.cnn.com/
5. Restart the browser
6. Go to Preferences -> Privacy and Security -> Remove Individual Cookies
   and check if cookies exist from cnn.com

Actual Result:
Cookies are not blocked by the policy

Expected Result:
Cookies should be blocked when a cookie-block policy is in use.

Comment 1

[:Felipe Gomes (needinfo for replies!)]

After investigating this we found out what was the problem. The policy is working correctly, but no single entry can fully block cnn.com.

The problem is that we were visiting cnn.com directly, which got redirected to www.cnn.com. To block that, we need two entries:

cnn.com    =>  blocks cnn.com, but not any subdomains
.cnn.com   =>  blocks any subdomains, but not cnn.com

I'll make sure to make this clear on the documentation for this policy when we write more detailed notes.

Comment 2

[Abe - QA (:Abe_LV)]

Closing this as "Works for Me" because the issue is resolved by adding two entries for cnn.com(see comment 1).