Closed Bug 1595720 Opened 3 months ago Closed 2 months ago

Set Feature Policy default allow list for fullscreen to eself, disable third party by default

Categories

(Core :: DOM: Security, enhancement, P2)

enhancement

Tracking

()

RESOLVED FIXED
mozilla73
Tracking Status
firefox73 --- fixed

People

(Reporter: tnguyen, Assigned: tnguyen)

References

(Blocks 1 open bug)

Details

(Whiteboard: [domsecurity-active])

Attachments

(1 file)

I think we just have to change Feature Polcy default list to eSelf, means we disable third party by default

Blocks: 1572461
Assignee: nobody → tnguyen
Component: DOM: Core & HTML → DOM: Security
Status: NEW → ASSIGNED
Priority: -- → P2
Whiteboard: [domsecurity-active]
Summary: Apply permission delegate policy to fullscreen using feature policy → Set Feature Policy for fullscreen to eself, disable third party by default
Summary: Set Feature Policy for fullscreen to eself, disable third party by default → Set Feature Policy default allow list for fullscreen to eself, disable third party by default
Pushed by tnguyen@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/40f6133b6b61
Disable fullscreen in third party by default r=baku
Pushed by tnguyen@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/0f25fab8153e
Disable fullscreen in third party by default r=baku
Status: ASSIGNED → RESOLVED
Closed: 2 months ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla73
Flags: needinfo?(tnguyen)
You need to log in before you can comment on or make changes to this bug.