1531538 - Delay resolving the promise returned from requestStorageAccess when the automatic storage access grants are invoked

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, enhancement)

Description

[(no longer active)]

Right now our implementation of the Storage Access API allows automatic short-lived temporary access grants. This is something that websites can detect reliably, i.e., they can detect whether Firefox granted this access based on our automated heuristic or not by timing how long it would take for the promise to get resolved and then looking inside the cookie jar to check whether they've called requestStorageAccess() successfully before.

In order to mitigate this, we should resolve the promise with a large random delay to make it indistinguishable from the user clicking on the prompt.

Comment 1

[(no longer active)]

Attachment: Bug 1531538 - Delay resolving the promise returned from requestStorageAccess when the automatic storage access grants are invoked;

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/8cbf86043273
Delay resolving the promise returned from requestStorageAccess when the automatic storage access grants are invoked; r=baku

Comment 3

[Andrei Ciure[:aciure]]

https://hg.mozilla.org/mozilla-central/rev/8cbf86043273