1436326 - Adding privacy.resistFingerprinting.silent

Status: RESOLVED DUPLICATE of bug 1429865

(Core :: DOM: Security, enhancement)

Description

[sworddragon2]

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0
Build ID: 20100101

Steps to reproduce:

1. Go to about:config and set privacy.resistFingerprinting to true.
2. Go to a site that uses canvas (for example https://mikeconley.ca/blog/2018/01/11/making-tab-switching-faster-in-firefox-with-tab-warming/ ).


Actual results:

A color palette symbol in the address bar with a door hanger asks for canva access.


Expected results:

It is nice that you can add exceptions for specific sites but personally I prefer to have as less disruption as possible. Enabling privacy.resistFingerprinting has already some downsites (websites breaking; usability in Firefox getting worse) so I would be fine if the door hanger would not be shown (implying not granting the requested permission) and instead requiring the color palette symbol to be explicitly clicked for the door hanger to appear. Maybe privacy.resistFingerprinting.silent (or another suitable name) can be added so the user can control the default behavior.


Additional information:

I'm also noticing that making a decision causes the color palette symbol to disappear and the info door hanger claims that no specific permission are granted. I'm not sure if this is intended or not but this way it seems to be not possible to revert the decission without modifying permissions.sqlite.

Comment 1

[Thorin [:thorin]]

Bug 1429865 discusses a default pref for RFP canvas but see comment 13 (https://bugzilla.mozilla.org/show_bug.cgi?id=1429865#c13) where the next step is to reduce the canvas prompt fatigue via Bug 1376865 and then reassess.

As for controlling site specific canvas permissions, Bug 1413780 covers this in FF59+

@Tom Ritter: Suggest closing this as a duplicate?

Comment 2

[Tom Ritter [:tjr] (OOTO until April)]

Yes, Simon said everything I could say.

Thanks for the input though, it's valuable to know how people perceive this feature and how they would like it to behave in the future, so we appreciate it!