The Cache API should not be accessible in Window or workers for 3rd party iframes when the user has disable 3rd party cookies. ServiceWorkers will be handled separately by prevented fetch interception for 3rd party iframes in these cases.

From Ehsan, the pref in question is network.cookie.cookieBehavior and the third party rejection value is 1.

I discussed with Ehsan and we will do this a bit later.

You've probably seen this already, Michael, but https://dxr.mozilla.org/mozilla-central/source/dom/indexedDB/IDBFactory.cpp#354 is related (but we need to also look at the pref).

This patch uses the StorageAllowedForWindow logic being implemented in bug 1184789. Test coverage on this functionality hasn't been checked yet, but new tests for the behavior will likely have to be written. try: https://treeherder.mozilla.org/#/jobs?repo=try&revision=204836d73b40

Updated version of patch. Part 2 of new storage logic. Full tree here: https://github.com/mystor/mozilla-central/tree/storage_pref try: https://treeherder.mozilla.org/#/jobs?repo=try&revision=d48360c5cc3e

s/Part 2/Part 5 - oops

Comment on attachment 8641988 [details] [diff] [review] Update CacheStorage to use common StorageAllowedForWindow logic Over to Ben.

Comment on attachment 8641988 [details] [diff] [review] Update CacheStorage to use common StorageAllowedForWindow logic Review of attachment 8641988 [details] [diff] [review]: ----------------------------------------------------------------- Looks good. Thanks! r=me I was considering switching the content principal check in CacheStorage IsTrusted to a MOZ_ASSERT, but I think its safer to leave it as a runtime check for now.

Updated due to changes in StorageAllowedFor*

Backout: https://hg.mozilla.org/integration/mozilla-inbound/rev/5482a856cc1d

Posted the site compatibility doc: https://www.fxsitecompat.com/en-US/docs/2015/web-storage-indexeddb-cache-api-now-obey-third-party-cookies-preference/