Add more shopee domains to the site permissions blocklist
Categories
(Toolkit :: Add-ons Manager, enhancement)
Tracking
()
People
(Reporter: bholley, Assigned: bholley)
References
Details
Attachments
(1 file)
|
48 bytes,
text/x-phabricator-request
|
diannaS
:
approval-mozilla-beta+
|
Details | Review |
WebMIDI fingerprinting on shoppee.th was the index case that led us to build the blocklist. At the time it appeared that shopee had responded to the issue by removing the fingerprinting, but our suspicious site telemetry indicates that it continues to resurface sporadically across other shopee domains.
Shopee has a bunch of different country-specific domains, which is annoying. It's almost enough to warrant adding some regexp capabilities to our domain blocklist, but I can cover the top 250k entries in the Tranco list with a bit more than a dozen entries, so I'll just do that for now.
|
Assignee | |
Comment 1•2 years ago
|
||
|
||
Comment 3•2 years ago
|
||
| bugherder | ||
|
|
Assignee | |
Comment 4•2 years ago
|
||
Comment on attachment 9325272 [details]
Bug 1824812 — Add more shopee domains to the site permissions blocklist.
Beta/Release Uplift Approval Request
- User impact if declined: Nuisance prompts for another cycle.
- Is this code covered by automated tests?: Yes
- Has the fix been verified in Nightly?: No
- Needs manual test from QE?: No
- If yes, steps to reproduce:
- List of other uplifts needed: None
- Risk to taking this patch: Low
- Why is the change risky/not risky? (and alternatives if risky): Very low risk. Just adds a few domains to a blocklist to prevent them from using WebMIDI for fingerprinting.
- String changes made/needed: None
- Is Android affected?: No
|
||
Comment 5•2 years ago
|
||
Comment on attachment 9325272 [details]
Bug 1824812 — Add more shopee domains to the site permissions blocklist.
Approved for 112.0b8
|
|
||
Comment 6•2 years ago
|
||
| bugherder uplift | ||
Description
•