Enhance uMatrix through Feature Policy headers

[emanruse]

As far as I know uMatrix uses Content Security Policy headers which are great for controlling and restricting resources. Perhaps the new Feature Policy headers can help to additionally improve uMatrix (perhaps uBO too).

[uBlock-user]

How ? Can you be more specific ?

[gorhill]

Thanks for bringing this to my attention, I was unaware of this new spec. I will have to read through it and see how it can be useful for uMatrix/uBO.

[uBlock-user]

I wonder if this can used to neutralise fingerprinting by selectively disabling abusable features.

[uBlock-user]

WebRTC can also be disabled as per the bug tracker

[gwarser]

https://github.com/gorhill/uBlock/issues/3009#issuecomment-335249546

[uBlock-user]

The proposal did get implemented, so it wasn't abandoned after all.

[gwarser]

https://bugzilla.mozilla.org/show_bug.cgi?id=1390801 "Implement feature-policy"

[gwarser]

Where I can find list of these "features"? Link to "companion document" (mentioned here https://wicg.github.io/feature-policy/#features) is broken https://github.com/WICG/feature-policy/blob/gh-pages/features.md

[gorhill]

Only place I could find is directly in the source code. WebRTC was not in there yet.

[uBlock-user]

@gwarser Policy Controlled Features

[uBlock-user]

Policy Violation Reporting API is also being added, is this going to be in the same vein as CSP Reports ?

[gwarser]

Features planed to be supported: https://bugzilla.mozilla.org/attachment.cgi?id=9013158&action=diff

[Cerberus-tm]

This one might also be important: Should Feature-Policy limit what webextensions can do? https://bugzilla.mozilla.org/show_bug.cgi?id=1495709