Closed Bug 1475189 Opened 6 years ago Closed 6 years ago

Block storage access in tracking sub-resources when not in iframes

Categories

(Core :: DOM: Security, enhancement, P2)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla63
Tracking Flags:
Tracking Status
firefox63 --- fixed

People

(Reporter: baku, Assigned: baku)

References

(Blocks 2 open bugs)

Details

(Whiteboard: [domsecurity-active])

Attachments

(3 files)

part 1 - subresources
(deleted), patch
ehsan.akhgari
: review+
Details | Diff | Splinter Review
part 2 - tests
(deleted), patch
ehsan.akhgari
: review+
Details | Diff | Splinter Review
part 3 - images
(deleted), patch
ehsan.akhgari
: review+
Details | Diff | Splinter Review
The current code blocks storage access only for 3rd party tracking resources in iframe. We should apply the same logic to any URL loaded by the top-level window, such as scripts, images and so on, if they are marked as tracking resources.
Attached patch part 1 - subresources (deleted) — — Splinter Review
Attachment #8991564 - Flags: review?(ehsan)
Attached patch part 2 - tests (deleted) — — Splinter Review
Attachment #8991565 - Flags: review?(ehsan)
Status: NEW → ASSIGNED
Priority: -- → P2
Whiteboard: [domsecurity-active]
Attached patch part 3 - images (deleted) — — Splinter Review
This is the last patch.
Attachment #8991594 - Flags: review?(ehsan)
Attachment #8991564 - Flags: review?(ehsan) → review+
Attachment #8991594 - Flags: review?(ehsan) → review+
Attachment #8991565 - Flags: review?(ehsan) → review+
Pushed by amarchesini@mozilla.com: https://hg.mozilla.org/integration/mozilla-inbound/rev/36b513077735 Block storage access in tracking sub-resources when not in iframes - part 1 - tests, r=ehsan https://hg.mozilla.org/integration/mozilla-inbound/rev/aedfdb400cc1 Block storage access in tracking sub-resources when not in iframes - part 2 - subresources, r=ehsan https://hg.mozilla.org/integration/mozilla-inbound/rev/bbca8d90968e Block storage access in tracking sub-resources when not in iframes - part 3 - image cache, r=ehsan
https://hg.mozilla.org/mozilla-central/rev/36b513077735 https://hg.mozilla.org/mozilla-central/rev/aedfdb400cc1 https://hg.mozilla.org/mozilla-central/rev/bbca8d90968e
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
status-firefox63: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla63
No longer depends on: 1483765
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: