-
Notifications
You must be signed in to change notification settings - Fork 59
Open
Labels
privacy-trackerGroup bringing to attention of Privacy, or tracked by the Privacy Group but not needing response.Group bringing to attention of Privacy, or tracked by the Privacy Group but not needing response.security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.security/privacyThere are security or privacy implicationsThere are security or privacy implications
Description
In Firefox we disabled the capability for a third-party to prompt for the persistent storage permission.
Doing this helps with https://privacycg.github.io/storage-partitioning/ and also helps reduce the number of prompts where the third-party is shown.
(Delegation through the allow=""
attribute does not work, unless we reinterpret that as the first-party sharing its storage area, but that should probably be its own issue if there's interest in that kind of thing.)
This would be easy to add by adding a check for origin != top-level origin in the relevant places. Is there interest from Chrome?
Metadata
Metadata
Assignees
Labels
privacy-trackerGroup bringing to attention of Privacy, or tracked by the Privacy Group but not needing response.Group bringing to attention of Privacy, or tracked by the Privacy Group but not needing response.security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.security/privacyThere are security or privacy implicationsThere are security or privacy implications