Bug 200395 – Resource Load Statistics: Re-introduce latch mode for subresource cookie blocking

• Status: RESOLVED
• Resolution: FIXED
• Component: WebKit Misc.

[John Wilander]

Back when we had a relaxation of cookie blocking 24 hours after first-party user interaction, we made sure cookie blocking could be turned on and off in subresource redirect chains. The 24 hour window is now long gone and we should simplify the cookie blocking so that once a subresource request is denied cookies, any subsequent redirect of that request will also be denied cookies, regardless of the classification status of the domains involved.

[Radar WebKit Bug Importer]

<rdar://problem/53869611>

[John Wilander]

Created attachment 375427 [details]
Patch

[Darin Adler]

Comment on attachment 375427 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=375427&action=review

> Source/WebKit/NetworkProcess/cocoa/NetworkDataTaskCocoa.mm:142
> +    NSHTTPCookieStorage *storage = statelessCookieStorage();
> +    [m_task _setExplicitCookieStorage:storage._cookieStorage];

Since we’re collapsing this, I don’t think the local variable adds anything any more. Could be a one liner instead.

    [m_task _setExplicitCookieStorage:statelessCookieStorage()._cookieStorage];

[John Wilander]

(In reply to Darin Adler from comment #3)
> Comment on attachment 375427 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=375427&action=review
> 
> > Source/WebKit/NetworkProcess/cocoa/NetworkDataTaskCocoa.mm:142
> > +    NSHTTPCookieStorage *storage = statelessCookieStorage();
> > +    [m_task _setExplicitCookieStorage:storage._cookieStorage];
> 
> Since we’re collapsing this, I don’t think the local variable adds anything
> any more. Could be a one liner instead.
> 
>     [m_task
> _setExplicitCookieStorage:statelessCookieStorage()._cookieStorage];

You're right. Will fix.

I'm also going to rename NetworkDataTaskCocoa::applyCookieBlockingPolicy() to NetworkDataTaskCocoa::blockCookies() to make it clear at the call sites. At first, I wanted to stay with the more general "apply policy" to not have to touch it if we introduce more logic there. But now I think that's wrong. Readability wins.

[John Wilander]

Thanks for the review, Darin. I'll assume you're OK with the function renaming I mention above.

[John Wilander]

Created attachment 375540 [details]
Patch

[John Wilander]

The renaming ended up restructuring the code and I could remove some duplicate logging. So it's best to get another review.

[John Wilander]

Orange bubbles are unrelated. The mac-debug tree seems red and the test failures on win have nothing to do with this code.

[John Wilander]

Comment on attachment 375540 [details]
Patch

Thanks again, Darin!

[WebKit Commit Bot]

Comment on attachment 375540 [details]
Patch

Clearing flags on attachment: 375540

Committed r248273: <https://trac.webkit.org/changeset/248273>

[WebKit Commit Bot]

All reviewed patches have been landed.  Closing bug.