Closed Bug 1595720 Opened 5 years ago Closed 5 years ago

Set Feature Policy default allow list for fullscreen to eself, disable third party by default

Categories

(Core :: DOM: Security, enhancement, P2)

Product:
Core
Component:
DOM: Security
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla73
Tracking Flags:
Tracking Status
firefox73 --- fixed

People

(Reporter: tnguyen, Assigned: tnguyen)

References

Details

(Whiteboard: [domsecurity-active])

Attachments

(1 file)

Bug 1595720 - Disable fullscreen in third party by default
(deleted), text/x-phabricator-request
Details

I think we just have to change Feature Polcy default list to eSelf, means we disable third party by default

Blocks: 1572461
Assignee: nobody → tnguyen
Component: DOM: Core & HTML → DOM: Security
Status: NEW → ASSIGNED
Priority: -- → P2
Whiteboard: [domsecurity-active]
Summary: Apply permission delegate policy to fullscreen using feature policy → Set Feature Policy for fullscreen to eself, disable third party by default
Summary: Set Feature Policy for fullscreen to eself, disable third party by default → Set Feature Policy default allow list for fullscreen to eself, disable third party by default
Pushed by tnguyen@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/40f6133b6b61 Disable fullscreen in third party by default r=baku
Pushed by tnguyen@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/0f25fab8153e Disable fullscreen in third party by default r=baku

https://hg.mozilla.org/mozilla-central/rev/0f25fab8153e

Status: ASSIGNED → RESOLVED
Closed: 5 years ago
status-firefox73: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla73
Flags: needinfo?(tnguyen)
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: