1993708 - Permission prompts will pop up endlessly

Status: NEW

(Firefox :: Site Permissions, defect, P3)

Description

[709922234]

Attachment: screenshot-20251010-215732.png

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0

Steps to reproduce:

1. Visit the designated website

Actual results:

Permission prompts will pop up endlessly

Expected results:

No more pop-ups after allowing

Comment 1

[Emma Zühlcke [:emz]]

Clarification: Do you see prompts endlessly while on that site (without reloads) or do you see these prompts re-appearing as you reload the site or visit it again? Do you have a site you could share where this happens so I can try to reproduce myself?

I see we're lacking the "remember" option here. This might be because it's a third-party requesting it. Once we implement permissions policy we could prompt for the top level and also support persisting that choice.

IIRC we don't offer persisting the permission because - without permissions policy - this could would allow the requesting site to make LNA requests in both first party and third-party contexts which is unexpected. Also it's confusing to see a third-party prompt for LNA.

Sunil, I want to make sure this is on your radar.

Comment 2

[709922234]

This is our internal website.

I think it may have something to do with the fact that we changed the domain name, cache? cross domain?

Comment 3

[709922234]

I see it again when I switch tabs or refresh the page

Comment 4

[Sunil Mayya]

Thanks for filing the bug.
(In reply to 709922234 from comment #2)

This is our internal website.

I think it may have something to do with the fact that we changed the domain name, cache? cross domain

It's because of cross-domain. If you have a cross-site iframe on a page making a local access you would see this permission prompt without an option to remember. This means the permission is granted only temproarily.
With Bug 1988152, you should be able to configure a policy to skip LNA checks for specific domains.
BTW, can you please share the devtool output for the request?
Are you looking for any other workaround until Bug 1988152 is released?

Comment 5

[709922234]

Attachment: fe.shizhuang-inc.com_Archive [25-10-14 13-51-59].har

Comment 6

[Emma Zühlcke [:emz]]

Should be block this bug on the permissions policy integration? i.e. when we get the "remember" checkbox because we can prompt for the top level when a 3rd party does the request.

Comment 7

[Sunil Mayya]

Yes, Emma we should block this bug on Permission Policy Integration.

Comment 9

[1433452387]

Just to note, in Chromium browsers this use case works via the Permissions Policy on iframes:
<iframe src="https://domainB.example" allow="local-network-access"></iframe>

https://docs.google.com/document/d/1QQkqehw8umtAgz5z0um7THx-aoU251p705FbIQjDuGs/edit?pli=1&tab=t.0#heading=h.denb9idl4lm0

Comment 10

[Sunil Mayya]

Can u please check in the latest nightly, this will be resolved as we have implemented the permission policy for lna.
please note the latest permission names here , loopback-network and local-network -> https://wicg.github.io/local-network-access/#permissions