Get rid of dom.workers.enabled pref

RESOLVED FIXED in Firefox 60

Status

()

enhancement
P2
normal
RESOLVED FIXED
Last year
3 months ago

People

(Reporter: baku, Assigned: baku)

Tracking

({dev-doc-complete})

58 Branch
mozilla60
Points:
---

Firefox Tracking Flags

(firefox60 fixed)

Details

Attachments

(1 attachment)

Assignee

Description

Last year
Worker should be always enabled.
Priority: -- → P2
Assignee

Comment 1

Last year
Posted patch pref.patchSplinter Review
Attachment #8947480 - Flags: review?(bkelly)
Attachment #8947480 - Flags: review?(bkelly) → review+

Comment 3

Last year
bugherder
https://hg.mozilla.org/mozilla-central/rev/4191749c2609
Status: NEW → RESOLVED
Closed: Last year
Resolution: --- → FIXED
Target Milestone: --- → mozilla60
Probably not *really* worth mentioning, but I've added a small note anyway:
https://developer.mozilla.org/en-US/Firefox/Releases/60#DOM

Comment 5

Last year
I vote against this proposal.

Comment 6

Last year
Can someone please explain the REASONS WHY "Worker should be always enabled" as per comment 1 . Is it some technical reason / code simplification, or some arbitrary decision that workers are becoming more mainstream and the wider public is not allowed to "break" things? Being able to disable workers is a valid privacy mechanism.
Disabling workers is not a privacy enhancing change.  I don't know why people have that impression.  Dedicated and shared workers only live as long as there is a window opened to the given origin.  Service workers can run in the background if you grant push notifications, etc, but we still have a pref to disable service workers and we disable them depending on various privacy options set by the user.

Its not feasible to disable workers completely in firefox because the browser itself depends on them.
> Disabling workers is not a privacy enhancing change.  I don't know why people have that impression.

Worker SAB was the initial timing intrinsic used to run Spectre in browsers, and some people may be wary of additional timing intrinsics that have yet to be discovered or disclosed. I don't feel strongly about this issue, although I disagree with your statement about privacy. Disabling workers decreases attack surface, increasing security and, by extension, privacy.
Component: DOM → DOM: Core & HTML
You need to log in before you can comment on or make changes to this bug.