GrapheneOS / Vanadium

Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.
https://vanadium.app/
Other
870 stars 69 forks source link

TPCD Bypass Features #574

Open RKNF404 opened 2 months ago

RKNF404 commented 2 months ago

Two features, TpcdMetadataGrants and TpcdHeuristicGrants, appear to allow sites to bypass third-party cookie blocking. Shouldn't these ideally be disabled?

quh4gko8 commented 2 months ago

TPCD trials site settings are disabled by default, which is checked alongside these features. Nonetheless, these features can be disabled in the following releases as an additional precautionary measure.

quh4gko8 commented 2 months ago

This needs further investigation with the most recent development regarding third party cookies deprecation: https://privacysandbox.com/intl/en_us/news/privacy-sandbox-update/