Closed Bug 1638358 Opened 4 years ago Closed 4 years ago

Schemeful Same-Site

Categories

(Core :: Networking: Cookies, task, P2)

task

Tracking

()

RESOLVED FIXED
mozilla79
Tracking Status
firefox79 --- fixed

People

(Reporter: baku, Assigned: baku)

References

(Blocks 1 open bug, Regressed 1 open bug, )

Details

(Keywords: site-compat, Whiteboard: [necko-triaged])

Attachments

(6 files)

https://github.com/sbingler/schemeful-same-site:
"Modify SameSite’s implementation in the user agent to consider origins with different schemes as cross-site. Thus https://site.example and http://site.example would now be considered cross-site.
Part of this effort will be to update Incrementally Better Cookies to match the intended behavior."

This feature will be implemented behind pref: network.cookie.sameSite.schemeful

Severity: -- → S3
Priority: -- → P2
Whiteboard: [necko-triaged]
Keywords: site-compat
Pushed by amarchesini@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/d284b50551ab Cookie Schemeful Same-Site - part 1 - scheme map in nsICookie, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/31101054c52c Cookie Schemeful Same-Site - part 2 - schemeMap in the cookie DB, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/2156294cb158 Cookie Schemeful Same-Site - part 3 - update add/addNative methods, r=mayhemer,remote-protocol-reviewers,marionette-reviewers,maja_zf,MattN,whimboo https://hg.mozilla.org/integration/autoland/rev/1a85cc92d2fb Cookie Schemeful Same-Site - part 4 - tests for cookie scheme merging, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/a45df1876e37 Cookie Schemeful Same-Site - part 5 - schemeful comparison, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/745eab35e851 Cookie Schemeful Same-Site - part 6 - console messages, r=mayhemer
Flags: needinfo?(amarchesini)
Pushed by amarchesini@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/cddeada5c4a6 Cookie Schemeful Same-Site - part 1 - scheme map in nsICookie, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/05a62901a3f5 Cookie Schemeful Same-Site - part 2 - schemeMap in the cookie DB, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/932a3fdbd07c Cookie Schemeful Same-Site - part 3 - update add/addNative methods, r=mayhemer,remote-protocol-reviewers,marionette-reviewers,maja_zf,MattN,whimboo https://hg.mozilla.org/integration/autoland/rev/fad2ba760157 Cookie Schemeful Same-Site - part 4 - tests for cookie scheme merging, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/532731e94bb2 Cookie Schemeful Same-Site - part 5 - schemeful comparison, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/4e8fbe01aa38 Cookie Schemeful Same-Site - part 6 - console messages, r=mayhemer
Flags: needinfo?(amarchesini)
Pushed by amarchesini@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/4ac06f3992f4 Cookie Schemeful Same-Site - part 1 - scheme map in nsICookie, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/0219ef931cd9 Cookie Schemeful Same-Site - part 2 - schemeMap in the cookie DB, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/e91292c7c719 Cookie Schemeful Same-Site - part 3 - update add/addNative methods, r=mayhemer,remote-protocol-reviewers,marionette-reviewers,maja_zf,MattN,whimboo https://hg.mozilla.org/integration/autoland/rev/2c873c72bf1f Cookie Schemeful Same-Site - part 4 - tests for cookie scheme merging, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/39f2e21623aa Cookie Schemeful Same-Site - part 5 - schemeful comparison, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/beb85cf281d5 Cookie Schemeful Same-Site - part 6 - console messages, r=mayhemer
Flags: needinfo?(amarchesini)
Pushed by amarchesini@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/87e9d0ed3982 Cookie Schemeful Same-Site - part 1 - scheme map in nsICookie, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/6bc05236afb4 Cookie Schemeful Same-Site - part 2 - schemeMap in the cookie DB, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/d213264c1379 Cookie Schemeful Same-Site - part 3 - update add/addNative methods, r=mayhemer,remote-protocol-reviewers,marionette-reviewers,maja_zf,MattN,whimboo https://hg.mozilla.org/integration/autoland/rev/33ad5fa05209 Cookie Schemeful Same-Site - part 4 - tests for cookie scheme merging, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/89e396b2896e Cookie Schemeful Same-Site - part 5 - schemeful comparison, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/286e0c83eb30 Cookie Schemeful Same-Site - part 6 - console messages, r=mayhemer

Backed out for failures on browser_webconsole_network_messages_status_code.js

backout: https://hg.mozilla.org/integration/autoland/rev/852f0a4255cbcee5a221bfa1c5d38b540500d304

push: https://treeherder.mozilla.org/#/jobs?repo=autoland&group_state=expanded&selectedTaskRun=VpixAeH-QlyfuTbkMnn1UQ-0&revision=286e0c83eb307aaa499a8ce385df6289ccdd1f68&searchStr=devtools

failure log: https://treeherder.mozilla.org/logviewer.html#/jobs?job_id=304699347&repo=autoland&lineNumber=87151

[task 2020-06-02T10:31:25.636Z] 10:31:25 INFO - Console message: [JavaScript Error: "Content Security Policy: The page’s settings blocked the loading of a resource at inline (“default-src”)." {file: "chrome://global/content/elements/panel.js" line: 78}]
[task 2020-06-02T10:31:25.637Z] 10:31:25 INFO - Toolbox opened and focused
[task 2020-06-02T10:31:25.637Z] 10:31:25 INFO - XHR executed
[task 2020-06-02T10:31:25.637Z] 10:31:25 INFO - Console message: [JavaScript Warning: "Cookie “foo” has been treated as cross-site against “http://example.com/browser/devtools/client/webconsole/test/browser/test-data.json” because the scheme does not match." {file: "http://example.com/browser/devtools/client/webconsole/test/browser/test-data.json" line: 0}]
[task 2020-06-02T10:31:25.638Z] 10:31:25 INFO - Network message found.
[task 2020-06-02T10:31:25.638Z] 10:31:25 INFO - Buffered messages finished
[task 2020-06-02T10:31:25.639Z] 10:31:25 INFO - TEST-UNEXPECTED-FAIL | devtools/client/webconsole/test/browser/browser_webconsole_network_messages_status_code.js | Uncaught exception - at chrome://mochitests/content/browser/devtools/client/webconsole/test/browser/browser_webconsole_network_messages_status_code.js:43 - TypeError: can't access property "title", statusCodeNode is null
[task 2020-06-02T10:31:25.639Z] 10:31:25 INFO - Stack trace:
[task 2020-06-02T10:31:25.639Z] 10:31:25 INFO - task@chrome://mochitests/content/browser/devtools/client/webconsole/test/browser/browser_webconsole_network_messages_status_code.js:43:1
[task 2020-06-02T10:31:25.639Z] 10:31:25 INFO - Async*Tester_execTest/<@chrome://mochikit/content/browser-test.js:1064:34
[task 2020-06-02T10:31:25.639Z] 10:31:25 INFO - Tester_execTest@chrome://mochikit/content/browser-test.js:1104:11
[task 2020-06-02T10:31:25.639Z] 10:31:25 INFO - nextTest/<@chrome://mochikit/content/browser-test.js:927:14
[task 2020-06-02T10:31:25.639Z] 10:31:25 INFO - SimpleTest.waitForFocus/waitForFocusInner/focusedOrLoaded/<@chrome://mochikit/content/tests/SimpleTest/SimpleTest.js:918:23
[task 2020-06-02T10:31:25.639Z] 10:31:25 INFO - Leaving test bound task
[task 2020-06-02T10:31:26.179Z] 10:31:26 INFO - Removing tab.
[task 2020-06-02T10:31:26.179Z] 10:31:26 INFO - Waiting for event: 'TabClose' on [object XULElement].
[task 2020-06-02T10:31:26.195Z] 10:31:26 INFO - Got event: 'TabClose' on [object XULElement].
[task 2020-06-02T10:31:26.197Z] 10:31:26 INFO - GECKO(2566) | console.warn: "IGNORED REDUX ACTION:" ({type:"AUTOCOMPLETE_CLEAR"})
[task 2020-06-02T10:31:26.214Z] 10:31:26 INFO - Tab removed and finished closing
[task 2020-06-02T10:31:26.251Z] 10:31:26 INFO - TEST-PASS | devtools/client/webconsole/test/browser/browser_webconsole_network_messages_status_code.js | The main process DevToolsServer has no pending connection when the test ends -
[task 2020-06-02T10:31:26.267Z] 10:31:26 INFO - GECKO(2566) | MEMORY STAT | vsize 20976666MB | residentFast 2614MB

Pushed by amarchesini@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/df19526c4106 Cookie Schemeful Same-Site - part 1 - scheme map in nsICookie, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/c5976df6c8d1 Cookie Schemeful Same-Site - part 2 - schemeMap in the cookie DB, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/267b2d5c7eb6 Cookie Schemeful Same-Site - part 3 - update add/addNative methods, r=mayhemer,remote-protocol-reviewers,marionette-reviewers,maja_zf,MattN,whimboo https://hg.mozilla.org/integration/autoland/rev/dff1c1aca50c Cookie Schemeful Same-Site - part 4 - tests for cookie scheme merging, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/3ce54e39ebcd Cookie Schemeful Same-Site - part 5 - schemeful comparison, r=mayhemer https://hg.mozilla.org/integration/autoland/rev/2c1e8f5b08a2 Cookie Schemeful Same-Site - part 6 - console messages, r=mayhemer
Pushed by geoff@darktrojan.net: https://hg.mozilla.org/comm-central/rev/5e11fc413ca8 Port bug 1638358 - New argument to nsICookieManager.add. rs=bustage-fix
Regressions: 1642935
Regressions: 1643507
Regressions: 1650656
Regressions: 1665794
See Also: → 1673462
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: