brave / brave-browser

Brave browser for Android, iOS, Linux, macOS, Windows.
https://brave.com
Mozilla Public License 2.0
17.89k stars 2.34k forks source link

[Desktop][Shields]site cookie/perms management is unpleasant and inconvenient #14954

Open cjwijtmans opened 3 years ago

cjwijtmans commented 3 years ago

Description

I have cookies blocked by default. On websites that I use I then allow javascript and (non cross-site)cookies in brave shields.

First, this causes issues where sub-domain cookies are not allowed. Even though in cookie settings there is an entry for subdomains ie [*.]domain.tld it does not seem to work for subdomains. I have to manually add the same entry [*.]domain.tld for it to work. The existing [*.]domain.tld has multiple entries as embedded on sub.domain.tld which are not deletable after the fact (bug is reported I believe but still not fixed).

Secondly, this means that when I try to log into the website and the backend uses sub-domains and http location redirects I will not be able to log in due to cookies not being passed on through to log in process until I do the manual cookie permission fix. It could also be fixable if http location redirects were blockable so i could allow cookies in brave shield before the subdomain is flashed away before my eyes. Also i despise this browser behavior in the first place so it should be blockable in general (bug also reported i believe but ignored).

Third, Temporarily enabling Javascript should be until the browser closes not just a one time page load. Also enabling/disabling a braveshield setting refreshes the page which it should NOT do. Which means when I enabled either cookies or javascript setting on a sub domain it refreshes the page and sometimes it redirects the domain through whatever means while either cookies or javscripts are still blocked messing with the log-in process, which has happened to me several times.

Fourth, brave shields should have several profiles to select from instead of on/off. IE allowed, normal, strict and blocked, where normal or strict is selected by default. Where each profile can have their settings tweaked as well, which ius much nicer than tinkering on each website. Also you should be able to select that its temporary so that the particular website is no longer on that profile next browser boot.

I believe some of the bugs are reported individually but combined they are such a nuisance I thought this should be a high priority bug.

Steps to Reproduce

  1. block all cookies
  2. go to ebay.tld
  3. put cookies on Cross-site cookies blocked in brave shields
  4. try to log in ebay

Actual result:

Expected result:

Reproduces how often:

Easily reproduced

Brave version (brave://version info)

Brave 1.22.67 Chromium: 89.0.4389.90 (Official Build) (64-bit)
Revision 62eb262cdaae9ef819aadd778193781455ec7a49-refs/branch-heads/4389@{#1534}

Version/Channel Information:

Other Additional Information:

Miscellaneous Information:

rebron commented 3 years ago

cc: @jumde Part of the cookies/shields UE issues.