Open Bug 1889762 Opened 3 months ago Updated 3 months ago

Service Workers don't apply the correct overridden fingerprinting settings when isolated/partitioned

Categories

(Core :: DOM: Service Workers, defect, P4)

Firefox 123
defect

Tracking

()

People

(Reporter: tjr, Unassigned)

References

Details

(Whiteboard: [fpp:m?])

Not a very high priority bug especially as we have not overrides yet, but I noticed when looking at Bug 1885471 that we get the overrides like this:

    // The service worker is for a first-party context, we can use the uri of
    // the service worker as the first-party domain to get the fingerprinting
    // protection overrides.
    overriddenFingerprintingSettings =
        nsRFPService::GetOverriddenFingerprintingSettingsForURI(uri, nullptr);

However when we're calling ShouldRFP, we pass the principal; which will later use the partition key from OriginAttributes to control our behavior when we're in a third party context.

We could use that same strategy when calling GetOverriddenFingerprintingSettingsForURI

S4 per "as we have not overrides yet". Thoughts, Andrew?

Severity: -- → S4
Flags: needinfo?(bugmail)

Yeah; this is in our work queue and we'll get to it when it makes sense.

Flags: needinfo?(bugmail)
Priority: -- → P4
You need to log in before you can comment on or make changes to this bug.