1943536 - Disable storage access heuristics for trackers

Status: ASSIGNED

(Core :: Privacy: Anti-Tracking, task)

Description

[Tim Huang[:timhuang]]

Introduce a pref to control storage access heuristics for third-party trackers.

Comment 1

[Tim Huang[:timhuang]]

Attachment: Bug 1943536 - Part 1: Fixing the name of the pref to exclude third-party trackers from SAA AutoGrants. r?#anti-tracking

We used a wrong name for the pref that controls SAA AutoGrants for
third-party trackers. This patch fixes this by introducing a pref with a
properly. We will keep the pref that controls SAA heuristics for
third-party trackers.

Comment 2

[Tim Huang[:timhuang]]

Attachment: Bug 1943536 - Part 2: Exclude the openerWithUserInteraction heuristic from first-party tracking windows. r?bvandersloot!

Currently, we only allow openerWithUserInteraction heuristic for
trackering windows, which doesn't match the MDN article of SAA
heuristics.

In addition, we want to remove the opener heuristic in the future and
move to use the openerWithUserInteraction instead.

In this patch, we change the heuristic to allow it for non-tracking
windows and put it behind the pref.

Depends on D238940

Comment 3

[Tim Huang[:timhuang]]

Attachment: Bug 1943536 - Part 3: Exclude first-party trackers from the Navigation heuristic. r?bvandersloot!

Depends on D238941

Comment 4

[Tim Huang[:timhuang]]

Attachment: Bug 1943536 - Part 4: Exclude third-party trackers from triggering the opener heuristics. r?bvandersloot!

We excludes third-party trackers to trigger the opener heuristic.

First, we don't allow a third-party tracking window to trigger the
heuristic. Second, we don't trigger opener heuristic if the opened URL
is a tracking URL.

Depends on D238942

Comment 5

[Tim Huang[:timhuang]]

Attachment: Bug 1943536 - Part 5: Add tests. r?bvandersloot!

The patch adds tests to ensure third-party trackers cannot trigger
opener and openerWithUserInteraction heuristics. The test for navigation
heuristic is covered by browser_storageAccessWithDynamicFpi.js

Depends on D238943