1672649 - Storage permission restriction doesn't sync for cookie blocking and dFPI

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, defect, P2)

Description

[Dimi Lee [ooo 16.04 - 21.04］]

There are two cases we don't sync the behavior of cookie blocking and dFPI

1. Permission propagation
2. API to check storage permission

In cookie blocking, we only grant permission for first-level iframes, however, this restriction doesn't apply to dFPI. We should fix the discrepancy between cookie blocking and dFPI.

Comment 1

[Tim Huang[:timhuang]]

Attachment: Bug 1672649 - Part 1: Make the storage access works on nested iframes. r?dimi

Comment 2

[Tim Huang[:timhuang]]

Attachment: Bug 1672649 - Part 2: Notify the observer when there is user-interaction or storage access permission added. r?dimi

We need to report when permission is added in order to wait it
explicitly. These will be put be hind a pref
'privacy.antitracking.testing' and should be only used for testing.

Depends on D94978

Comment 3

[Tim Huang[:timhuang]]

Attachment: Bug 1672649 - Part 3: Modify the test framework to test the nested iframes. r?dimi

Depends on D94979

Comment 4

[Tim Huang[:timhuang]]

In this bug, we are going to align the behavior between cookie blocking and the dFPI. We will relax the storage accees restriction of cookie blocking and make it can work in nested iframes. So, both cookie blocking and dFPI can get storage access in nested iframe after this bug.

Comment 5

[Tim Huang[:timhuang]]

Attachment: Bug 1672649 - Part 4: Remove unnecessary support function 'AntiTrackingUtils::IsFirstLevelSubContext()'. r?dimi

Depends on D94980

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/ba16bd0b5610
Part 1: Make the storage access works on nested iframes. r=dimi
https://hg.mozilla.org/integration/autoland/rev/936fe00d93b5
Part 2: Notify the observer when there is user-interaction or storage access permission added. r=dimi
https://hg.mozilla.org/integration/autoland/rev/e4350f6d0c3c
Part 3: Modify the test framework to test the nested iframes. r=dimi
https://hg.mozilla.org/integration/autoland/rev/4c943005f6f4
Part 4: Remove unnecessary support function 'AntiTrackingUtils::IsFirstLevelSubContext()'. r=dimi

Comment 7

[Cristian Brindusan [:cbrindusan]]

https://hg.mozilla.org/mozilla-central/rev/ba16bd0b5610
https://hg.mozilla.org/mozilla-central/rev/936fe00d93b5
https://hg.mozilla.org/mozilla-central/rev/e4350f6d0c3c
https://hg.mozilla.org/mozilla-central/rev/4c943005f6f4