Re: Intent to Implement: Storage Access API

2018-09-12 Thread Ehsan Akhgari
On Wed, Sep 12, 2018 at 3:47 AM Anne van Kesteren wrote: > On Tue, Sep 11, 2018 at 9:06 PM Ehsan Akhgari > wrote: > > Please note that Firefox will grant storage access permissions > > automatically under certain circumstances for web compatibility reasons, > so > > even when the iframe has

Re: Intent to Implement: Storage Access API

2018-09-12 Thread Anne van Kesteren
On Tue, Sep 11, 2018 at 9:06 PM Ehsan Akhgari wrote: > Please note that Firefox will grant storage access permissions > automatically under certain circumstances for web compatibility reasons, so > even when the iframe has never called this API it may still obtain storage > access. In order to

Re: Intent to Implement: Storage Access API

2018-09-11 Thread Ehsan Akhgari
On Mon, Sep 10, 2018 at 11:19 AM James Graham wrote: > On 07/09/2018 21:27, Ehsan Akhgari wrote: > > > Very cool, I did not know this! It seems like test_driver.bless() is > > what we need here for simulating a user activation gesture. > > > > However it sounds like in this case you may

Re: Intent to Implement: Storage Access API

2018-09-11 Thread Ehsan Akhgari
On Sun, Sep 9, 2018 at 5:10 AM Mike O'Neill wrote: > This is great but I have a couple queries. > > > >In our implementation, once Storage Access API grants storage access, > >all existing third-party iframes on the same first party will receive > that > >storage access, whereas in

Re: Intent to Implement: Storage Access API

2018-09-10 Thread James Graham
On 07/09/2018 21:27, Ehsan Akhgari wrote: Very cool, I did not know this!  It seems like test_driver.bless() is what we need here for simulating a user activation gesture. However it sounds like in this case you may need to add test-only APIs for manipulating internal browser state.

Re: Intent to Implement: Storage Access API

2018-09-10 Thread Frederik Braun
On 09.09.2018 11:05, Mike O'Neill wrote: >> >> We don’t necessarily believe that a model where the user is asked whether >> they consent to sharing their data with third-party trackers is ideal, >> because explaining the implications of the data sharing is very hard, and >> there are many

Re: Intent to Implement: Storage Access API

2018-09-09 Thread Mike O'Neill
This is great but I have a couple queries. > >In our implementation, once Storage Access API grants storage access, >all existing third-party iframes on the same first party will receive that >storage access, whereas in WebKit’s implementation they each would require >calling

Re: Intent to Implement: Storage Access API

2018-09-07 Thread Ehsan Akhgari
On Fri, Sep 7, 2018 at 2:49 PM James Graham wrote: > > web-platform-tests: Our implementation unfortunately doesn’t come with > > web-platform-tests, for two reasons. One is that there is currently no > way > > to mock user gestures in web platform tests [4], and the second reason is > > that

Re: Intent to Implement: Storage Access API

2018-09-07 Thread Ehsan Akhgari
On Fri, Sep 7, 2018 at 2:32 PM Tom Ritter wrote: > On Fri, Sep 7, 2018 at 12:54 PM, Ehsan Akhgari > wrote: > >>In our implementation, once the Storage Access API grants storage >>access, all newly created third-party iframes of the same origin will >> have >>storage access for a

Re: Intent to Implement: Storage Access API

2018-09-07 Thread James Graham
web-platform-tests: Our implementation unfortunately doesn’t come with web-platform-tests, for two reasons. One is that there is currently no way to mock user gestures in web platform tests [4], and the second reason is that furthermore, our implementation also depends on being able to

Re: Intent to Implement: Storage Access API

2018-09-07 Thread Tom Ritter
On Fri, Sep 7, 2018 at 12:54 PM, Ehsan Akhgari wrote: >In our implementation, once the Storage Access API grants storage >access, all newly created third-party iframes of the same origin will > have >storage access for a period of time (currently defined at 30 days) > without >

Intent to Implement: Storage Access API

2018-09-07 Thread Ehsan Akhgari
Hi everyone, As we recently announced [0], we are working on a number of new anti-tracking features which are intended to change the current approach in Firefox with regards to how user’s data is shared with third-party trackers as the user browses the web. In the old world (the status quo for