RESOLVED FIXED 185534
Storage Access API: Extend lifetime of cookies on successful user approval
https://bugs.webkit.org/show_bug.cgi?id=185534
Summary Storage Access API: Extend lifetime of cookies on successful user approval
John Wilander
Reported 2018-05-10 16:35:49 PDT
Experimental Storage Access API prompting is added in https://bugs.webkit.org/show_bug.cgi?id=185335. We should consider explicit user opt-in equivalent to user interaction as first party and thus extend the life time of cookies and website data.
Attachments
Patch (4.36 KB, patch)
2018-05-10 16:38 PDT, John Wilander
no flags
Patch for landing (4.50 KB, patch)
2018-05-10 18:21 PDT, John Wilander
no flags
John Wilander
Comment 1 2018-05-10 16:36:16 PDT
John Wilander
Comment 2 2018-05-10 16:38:49 PDT
Brent Fulgham
Comment 3 2018-05-10 16:55:51 PDT
Comment on attachment 340146 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=340146&action=review > Source/WebKit/ChangeLog:4 > + https://bugs.webkit.org/show_bug.cgi?id=185534 <rdar://problem/40064547> > Source/WebKit/UIProcess/WebResourceLoadStatisticsStore.cpp:466 > + if (userWasPromptedNowOrEarlier && m_storageAccessPromptsEnabled) { Is it possible to have "userWasPromptedNowEarlier" be true, but 'm_storageAccessPromptsEnabled' is false? It doesn't seem like this code needs to know the state of the prompts being enabled -- if we get an update that says the prompt was accepted, we can just extend the lifetime of the cookie.
Brent Fulgham
Comment 4 2018-05-10 17:14:02 PDT
Comment on attachment 340146 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=340146&action=review >> Source/WebKit/UIProcess/WebResourceLoadStatisticsStore.cpp:466 >> + if (userWasPromptedNowOrEarlier && m_storageAccessPromptsEnabled) { > > Is it possible to have "userWasPromptedNowEarlier" be true, but 'm_storageAccessPromptsEnabled' is false? It doesn't seem like this code needs to know the state of the prompts being enabled -- if we get an update that says the prompt was accepted, we can just extend the lifetime of the cookie. Oh I get it. The tests won't work properly if we don't check for the experimental feature. Can you just add a FIXME here to remove this code once if we decide to use prompting for Storage Access API?
Brent Fulgham
Comment 5 2018-05-10 17:14:47 PDT
Comment on attachment 340146 [details] Patch r=me if EWS passes, and if you add the FIXME (with radar/bugzilla)
John Wilander
Comment 6 2018-05-10 18:21:41 PDT
Created attachment 340154 [details] Patch for landing
John Wilander
Comment 7 2018-05-10 18:24:46 PDT
Thanks, Brent!
WebKit Commit Bot
Comment 8 2018-05-10 18:59:30 PDT
Comment on attachment 340154 [details] Patch for landing Clearing flags on attachment: 340154 Committed r231684: <https://trac.webkit.org/changeset/231684>
WebKit Commit Bot
Comment 9 2018-05-10 18:59:31 PDT
All reviewed patches have been landed. Closing bug.
Note You need to log in before you can comment on or make changes to this bug.