1837648 - Add support for 3rdPartyFrameStorage permission and the frame-only Storage Access API to GeckoView

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, enhancement)

Description

[Benjamin VanderSloot [:bvandersloot]]

This will involve enabling the frame only Storage Access API permission and making changes to the permissions in GeckoView to support the new permission that appears. The hard part here is the general weirdness between having two permissions that have identical semantics the user (because of their privacy properties), but maybe not the developer.

One approach would be to have the "storage-access" refer to specifically the 3rdPartyFrameStorage internal permission and a new type for the 3rdPartyStorage internal permission. This would leave dealing with the UI implications of both being set to the consumer, which may be the right tradeoff. The diff for this approach would closely follow some parts of the fix for Bug 1543720, where we added the "storage-access" permission to GeckoView.

Comment 1

[Benjamin VanderSloot [:bvandersloot]]

Attachment: Bug 1837648 - Add support for 3rdPartyFrameStorage permission and the frame-only Storage Access API to GeckoView - r=#geckoview-reviewers!

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/40a0cdd2dd0a
Add support for 3rdPartyFrameStorage permission and the frame-only Storage Access API to GeckoView - r=geckoview-reviewers,owlish

Comment 3

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/40a0cdd2dd0a