1989242 - Reset and disable web-compat heuristics for storage-access on websites using the storage-access-api/-headers to make it more predictable/standard-conform

Status: NEW

(Core :: Privacy: Anti-Tracking, enhancement, P3)

Description

[Manuel Bucher [:manuel]]

Personally I'd like to get rid of heuristics as much as possible. Websites that are able to use the storage-access, expect the API to behave as specced. Not granting storage-access through heuristics would make this more predictable for websites.

We could consider disabling the heuristics for websites when encountering use of storage-access api for the first time would.

Also only sending values other than "Sec-Fetch-Storage-Access: none" only on websites that have prior use of storage-access-api would be good too.