Closed Bug 1908677 Opened 3 months ago Closed 2 months ago

Website always saves to Settings / Privacy & Security / Cookies and Site Data / Manage Data

Categories

(Toolkit :: Data Sanitization, defect)

Firefox 128
defect

Tracking

()

RESOLVED INVALID

People

(Reporter: lagunajunk, Unassigned)

References

Details

Steps to reproduce:

I have Firefox configured to "Delete cookies and site data when Firefox is closed" and "Clear history when Firefox closes." I have a few websites allowed as exceptions to the cookies and site data deletion, and "History," "Cookies and site data" and "Temporary cached files and pages" are checked in the history clear. Up until now, the only sites that would appear in "Manage Data" when I opened Firefox were the websites I allowed as exceptions.

Actual results:

If I visit https://nightswithalicecooper.com (this is NOT a website that I have allowed as an exception), this site gets added to the "Manage Data" list and does not clear upon Firefox exit. I even blocked this site under "Manage Exceptions" and it still gets added and persists.

Expected results:

nightswithalicecooper should not save to the "Manage Data" list. Through trial and error, It appears that having google.com allowed as a website exception is triggering nightswithalicecooper to save.

The Bugbug bot thinks this bug should belong to the 'Toolkit::Data Sanitization' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Component: Untriaged → Data Sanitization
Product: Firefox → Toolkit

I tried reproducing this and it looks like a majority of the cookies are cleared (it goes from 13 to 2). Is this what you see aswel, or do all the 12 or 13 cookies persist?

This issue was reproducible before 128 too (I tested on fx 125)

Flags: needinfo?(lagunajunk)
  1. Under Settings / Privacy & Security / Cookies and Site Data / Manage Exceptions, I entered google.com, clicked Allow and clicked Save Changes

  2. Under Cookies and Site Data, I checked the Delete cookies and site data when Firefox is closed box

  3. Under History, I checked Clear history when Firefox closes and under Settings I checked History, Cookies and site data and Temporary cached files and pages (Site settings is NOT checked)

  4. I visited https://nightswithalicecooper.com

  5. I exited Firefox and then reopened it

  6. Under Settings / Privacy & Security / Cookies and Site Data / Manage Data, nightswithalicecooper.com has been added - this should NOT be as this site was not allowed as an Exception - I have not seen this behavior with any other website. Cookies shows as 0 so they have been cleared but there is always storage of 103 bytes.

  7. Even if I go to Settings / Privacy & Security / Cookies and Site Data / Manage Exceptions, enter nightswithalicecooper.com, click Block and click Save Changes this website will still show in Manage Data if I visit it and exit Firefox

Flags: needinfo?(lagunajunk)

The issue you're experiencing is related to partitioned cookies and storage. Here's a clearer explanation:

  1. Third-party content: The website https://nightswithalicecooper.com embeds Google elements that use storage.
  2. Partitioned storage: These Google elements store data with a partition key linked to google.com.
  3. Exception rule: Since you've added an exception for google.com, this storage isn't cleared on shutdown

Our user interface currently displays storage information based on the top-level domain (TLD). In this case, it shows https://nightswithalicecooper.com as having the storage, even though it's actually associated with the third-party domain (google.com).

We will be looking into making this UI more comprehensive, either by switching how the exceptions work, or making the manage data dialog more detailed

Status: UNCONFIRMED → RESOLVED
Closed: 2 months ago
Resolution: --- → INVALID
See Also: → 1910680
You need to log in before you can comment on or make changes to this bug.