Closed
Bug 1475189
Opened 6 years ago
Closed 6 years ago
Block storage access in tracking sub-resources when not in iframes
Categories
(Core :: DOM: Security, enhancement, P2)
Core
DOM: Security
Tracking
()
RESOLVED
FIXED
mozilla63
Tracking | Status | |
---|---|---|
firefox63 | --- | fixed |
People
(Reporter: baku, Assigned: baku)
References
(Blocks 2 open bugs)
Details
(Whiteboard: [domsecurity-active])
Attachments
(3 files)
1.00 KB,
patch
|
ehsan.akhgari
:
review+
|
Details | Diff | Splinter Review |
5.93 KB,
patch
|
ehsan.akhgari
:
review+
|
Details | Diff | Splinter Review |
16.69 KB,
patch
|
ehsan.akhgari
:
review+
|
Details | Diff | Splinter Review |
The current code blocks storage access only for 3rd party tracking resources in iframe. We should apply the same logic to any URL loaded by the top-level window, such as scripts, images and so on, if they are marked as tracking resources.
Assignee | ||
Comment 1•6 years ago
|
||
Attachment #8991564 -
Flags: review?(ehsan)
Assignee | ||
Comment 2•6 years ago
|
||
Attachment #8991565 -
Flags: review?(ehsan)
Updated•6 years ago
|
Status: NEW → ASSIGNED
Priority: -- → P2
Whiteboard: [domsecurity-active]
Assignee | ||
Comment 3•6 years ago
|
||
This is the last patch.
Attachment #8991594 -
Flags: review?(ehsan)
Updated•6 years ago
|
Attachment #8991564 -
Flags: review?(ehsan) → review+
Updated•6 years ago
|
Attachment #8991594 -
Flags: review?(ehsan) → review+
Updated•6 years ago
|
Attachment #8991565 -
Flags: review?(ehsan) → review+
Pushed by amarchesini@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/36b513077735
Block storage access in tracking sub-resources when not in iframes - part 1 - tests, r=ehsan
https://hg.mozilla.org/integration/mozilla-inbound/rev/aedfdb400cc1
Block storage access in tracking sub-resources when not in iframes - part 2 - subresources, r=ehsan
https://hg.mozilla.org/integration/mozilla-inbound/rev/bbca8d90968e
Block storage access in tracking sub-resources when not in iframes - part 3 - image cache, r=ehsan
Comment 5•6 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/36b513077735
https://hg.mozilla.org/mozilla-central/rev/aedfdb400cc1
https://hg.mozilla.org/mozilla-central/rev/bbca8d90968e
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
status-firefox63:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla63
Depends on: 1483765
You need to log in
before you can comment on or make changes to this bug.
Description
•