1962124 - Enable isolation for injected-by-addon resources in Nightly

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, task)

Description

[Andrea Marchesini [:baku]]

The feature was implemented in bug 1957355. This bug is about enabling it by default.

Comment 1

[Andrea Marchesini [:baku]]

Attachment: Bug 1962124 - Enable isolation for injected-by-addon resources, r?robwu

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/4da76e64b07d
Enable isolation for injected-by-addon resources, r=robwu

Comment 3

[Narcis Beleuzu [:NarcisB]]

https://hg.mozilla.org/mozilla-central/rev/4da76e64b07d

Comment 4

[Donal Meehan [:dmeehan]]

:baku do you want to nominate this for a release note? (Process info)
We could include it in the nightly only release notes.

Comment 5

[Andrea Marchesini [:baku]]

Release Note Request (optional, but appreciated)
[Why is this notable]: Reduce fingerprinting caused by add-ons that inject resources into pages via content scripts.
[Affects Firefox for Android]: Android is covered too
[Suggested wording]: Add-ons can inject resources into web pages, which may serve as fingerprinting vectors for malicious websites. In Nightly builds only, we are experimenting with an anti-tracking isolation feature for these resources to enhance user privacy.
[Links (documentation, blog post, etc)]: n/a

Comment 6

[Donal Meehan [:dmeehan]]

Thanks, added to the Fx140 nightly release notes, please allow 30 minutes for the site to update.

Comment 7

[Dianna Smith [:diannaS]]

Removing nightly+ flag from relnotes as this was turned off by default again in bug 1965552 in fx140