Closed Bug 1434934 Opened 3 years ago Closed 3 years ago

Get rid of dom.workers.enabled pref

Categories

(Core :: DOM: Core & HTML, enhancement, P2)

58 Branch
enhancement

Tracking

()

RESOLVED FIXED
mozilla60
Tracking Status
firefox60 --- fixed

People

(Reporter: baku, Assigned: baku)

Details

(Keywords: dev-doc-complete)

Attachments

(1 file)

Worker should be always enabled.
Priority: -- → P2
Attached patch pref.patchSplinter Review
Attachment #8947480 - Flags: review?(bkelly)
Attachment #8947480 - Flags: review?(bkelly) → review+
Pushed by amarchesini@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/4191749c2609
Remove dom.workers.enabled pref, r=bkelly
https://hg.mozilla.org/mozilla-central/rev/4191749c2609
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla60
Probably not *really* worth mentioning, but I've added a small note anyway:
https://developer.mozilla.org/en-US/Firefox/Releases/60#DOM
I vote against this proposal.
Can someone please explain the REASONS WHY "Worker should be always enabled" as per comment 1 . Is it some technical reason / code simplification, or some arbitrary decision that workers are becoming more mainstream and the wider public is not allowed to "break" things? Being able to disable workers is a valid privacy mechanism.
Disabling workers is not a privacy enhancing change.  I don't know why people have that impression.  Dedicated and shared workers only live as long as there is a window opened to the given origin.  Service workers can run in the background if you grant push notifications, etc, but we still have a pref to disable service workers and we disable them depending on various privacy options set by the user.

Its not feasible to disable workers completely in firefox because the browser itself depends on them.
> Disabling workers is not a privacy enhancing change.  I don't know why people have that impression.

Worker SAB was the initial timing intrinsic used to run Spectre in browsers, and some people may be wary of additional timing intrinsics that have yet to be discovered or disclosed. I don't feel strongly about this issue, although I disagree with your statement about privacy. Disabling workers decreases attack surface, increasing security and, by extension, privacy.
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.