1801711 - Additional preferences to sanitize or disable sanitization for

Status: RESOLVED FIXED

(Core :: Preferences: Backend, defect)

Description

[Tom Ritter [:tjr] (OOTO until 9/2)]

Telemetry shows:

• capability.policy.localfilelinks.checkloaduri.enabled
• capability.policy.localfilelinks.sites
• font.name.[fantasy/fixed/monospace/sans-serif/serif/].[font-name?]
• logging.config.LOG_FILE
• nimbus.syncdatastore.aboutwelcome
• nimbus.syncdatastore.aboutwelcome.id
• nimbus.syncdatastore.aboutwelcome.screens
• services.sync.clients.devices.mobile

All of these are very low-user-count (less than 46 on release channel)

Comment 1

[Tom Ritter [:tjr] (OOTO until 9/2)]

The capability.policy ones seem to be an incorrect assignment of localfilelinks_policy which is references in the code. Unusually, it seems like the way the related code is written it doesn't matter what the pref name is, as the name (well, part of the name) itself comes from the preference capability.policy.policynames which... seems odd to me. But, we'll allowlist the whole capability.policy tree.

font.name will get allowlisted also.

logging.config.LOG_FILE is a real logging pref

nimbus.syncdatastore. is the nimbus experiment branch, I guess we'll allowlist all of it.

services.sync.clients.devices.mobile is the number of mobile devices we are syncing to. There's also services.sync.clients.devices.desktop. I imagine this is also only used in the Privileged About Content Process (like services.sync.username) - we will have to wait until 108 hits release to be certain though. I won't allowlist it right now.

Comment 2

[Tom Ritter [:tjr] (OOTO until 9/2)]

Attachment: Bug 1801711: Allowlist some additional prefs for the content processes r?freddyb

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/82628babdf03
Allowlist some additional prefs for the content processes r=freddyb

Comment 4

[Cosmin Sabou [:CosminS]]

https://hg.mozilla.org/mozilla-central/rev/82628babdf03