1507769 - user-interaction required before granting storage access for 3rd party trackers

Status: RESOLVED FIXED

(Core :: DOM: Security, enhancement, P2)

Description

[Andrea Marchesini [:baku]]

This issue was in m-c but it has been removed by bug 1505571 (patch 1).

Now we want to have this feature back but behind pref: we want to be able to backlist hosts that try to workaround our anti-tracking policy, forcing the user to click on images, in order to generate interactions and to have storage-access permission granted.

Comment 1

[Andrea Marchesini [:baku]]

Attachment: opener4.patch

Comment 2

[(no longer active)]

Comment on attachment 9025633 [details] [diff] [review]
opener4.patch

Review of attachment 9025633 [details] [diff] [review]:
-----------------------------------------------------------------

Thanks!

::: modules/libpref/init/all.js
@@ +1365,5 @@
>  
>  // Enable Paritioned LocalStorage for a list of hosts.
>  pref("privacy.restrict3rdpartystorage.partitionedHosts", "accounts.google.com/o/oauth2/");
>  
> +// If an host is contained in this pref list, user-interaction is required

Nit: a host

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/401763b97e54
User-interaction required before granting storage access for some 3rd party trackers, r=ehsan

Comment 4

[Andrei Ciure[:aciure]]

Backed out 4 changesets (bug 1507769, bug 1505571) for browser_storageAccessWithHeuristics.js failures

push that caused the backout: https://treeherder.mozilla.org/#/jobs?repo=mozilla-inbound&resultStatus=testfailed%2Cbusted%2Cexception&classifiedState=unclassified&group_state=expanded&selectedJob=212682973&revision=401763b97e54cd99c6a5ad2a617379da011a57e5

failure: https://treeherder.mozilla.org/#/jobs?repo=mozilla-inbound&resultStatus=testfailed%2Cbusted%2Cexception&classifiedState=unclassified&group_state=expanded&fromchange=d32110a492f5eece3697fd039d53dba247f9f202&selectedJob=212675524&searchStr=os%2Cx%2C10.10%2Cdebug%2Cmochitests%2Cwith%2Ce10s%2Ctest-macosx64%2Fdebug-mochitest-browser-chrome-e10s-2%2Cm-e10s%28bc2%29

backout: https://hg.mozilla.org/integration/mozilla-inbound/rev/29ff944efa40e929995f6b2660383041738266f0

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/928f054b1125
User-interaction required before granting storage access for some 3rd party trackers, r=ehsan

Comment 6

[Razvan Maries]

https://hg.mozilla.org/mozilla-central/rev/928f054b1125