Open Bug 1922930 Opened 1 year ago Updated 1 year ago

site permissions can be used for DOS in private browsing

Categories

(Firefox for Android :: Browser Engine, defect, P2)

Product:
Firefox for Android
Component:
Browser Engine
Platform:
All
Android
Type:
defect

Tracking

()

People

(Reporter: kbrosnan, Unassigned)

References

(
URL
)

Details

(Keywords: csectype-dos, Whiteboard: [fxdroid][group1])

Steps to reproduce

  1. Visit https://www.portlandmarathon.com/courses in private browsing
  2. Try to interact with the page without giving access to your location

Expected behavior

The remember decision for the site should last for the private browsing session as desktop does.

Actual behavior

  1. The location request continuously interferes with using the website
  2. The remember decision does not function for the private browsing session
  3. The location request appears on different views and tabs and even on normal browsing if you can switch tabs quickly enough

Device information

  • Firefox version: 133 Nightly
  • Android device model: Pixel 6 Pro
  • Android OS version: Android 13

The severity field is not set for this bug.
:boek, could you have a look please?

For more information, please visit BugBot documentation.

Flags: needinfo?(jboek)
Severity: -- → S2
Flags: needinfo?(jboek)
Priority: -- → P2
Whiteboard: [fxdroid][group1]
You need to log in before you can comment on or make changes to this bug.