search

privacytests / privacytests.org

Source code for privacytests.org. Includes browser testing code and site rendering.
https://privacytests.org
MIT License
797 stars 23 forks source link

Test leaks allowed by browsers for SSOs #192

Open arthuredelstein opened 7 months ago

arthuredelstein commented 7 months ago

https://twitter.com/GrapheneOS/status/1728685777717170585

uazo commented 7 months ago

I think he refers to CookieSettings::MitigationsEnabledFor3pcdInternal() (net::features::kTpcdSupportSettings and net::features::kTpcdMetadataGrants see https://source.chromium.org/chromium/chromium/src/+/main:components/tpcd/README.md) but currently (v119) it is off by default in chromium. don't know in chrome if it is active by default.

thestinger commented 7 months ago

It's referring to what Brave and Firefox are doing for their cookie partitioning.

uazo commented 6 months ago

I would add that in v120 there is a new flag kTpcdHeuristicsGrants disabled by default, but can be activated by finch in chrome

explainer: https://github.com/amaliev/3pcd-exemption-heuristics/blob/main/explainer.md bugid: https://bugs.chromium.org/p/chromium/issues/detail?id=1484324

uazo commented 6 months ago

and I would also add https://developer.chrome.com/origintrials/#/view_trial/3315212275698106369