meta: tor uplift: privacy.firstparty.isolate

[Thorin-Oakenpants]

Locked sticky issue for tracking privacy.firstparty.isolate

• Tor Uplift
• MVP Tracking
• Bugzilla META FPI ticket
• Bugzilla META partitioning ticket
• Tor Uplift Dependency Tree

Last updated: see changelog at foot

---

RESOLVED & ADDED TO USER.JS ^{if applicable}

🔶 FPI : privacy.firstparty.isolate

🔻 FF51

• 1260931 enable First Party Isolation
  // user_pref("privacy.firstparty.isolate", true);
• 1278037 isolate indexedDB

🔻 FF52

• 1277803 isolate favicons
• 1264562 isolate OCSP cache
• 1268726 isolate Shared Workers
• 1316283 isolate SSL session cache

🔻 FF53

• 1317927 isolate media cache

🔻 FF54

• 1323644 isolate HSTS and HPKP
• 1334690 isolate HTTP Alternative Services
• 1319773#c22 enforce FPI restriction for window.opener
  // user_pref("privacy.firstparty.isolate.restrict_opener_access", true);

🔻 FF55

• 1334693 isolate SPDY/HTTP2
• 1337893 isolate DNS cache
• 1344170 isolate blob: URI
• 1300671 isolate data://, about: URLs

🔻 FF58

• 1376971 isolate Page Info media previews to content first party
• 1376973 favicon of tabs dropdown list does not honor originAttributes
• 1409045 extensions can control privacy.firstparty.isolate

🔻 FF63

• 1473247 isolate IP addresses

🔻 FF65

• 1492607 Prevent postMessage communication across first-party when restrict_opener_access = true

🔻 FF68

• 1542309 isolate top-level domain URLs
• 1506693 isolate PDFJS range-based requests Tor 26540, resolved 8.5a5

🔻 FF69

• 1330467 isolate site permissions

🔻 FF73

• 1534339 isolate IPv6 addresses

---

NOTABLE RESOLVED BREAKAGE

• 1418931 - FPI & IDB clearing on close or manually via clear recent/all history
  • fixed in FF58+
• 1381197 - FPI & cookies
  • fixed in FF59+
• 1384657 Pocket & FPI
  • fixed in FF66+

PENDING

• 444222 window.name
• cross-domain / login issues
  [lots: here are some] 1319728, 1336458, 1319839, 1319761, 1316019, 1340949 - breaks FF Sync's Manage Accounts
• 1371651 about:cache is broken
• 1397624 option to restrict FPI to PB mode
• 1398414 css visited links
• 1422056 isolate site permissions by OA
• 1475811 entering urls in addressbar violates FPI
• 1549587 dynamic FPI

INVALID / WONTFIX

• 1312655 checkbox in about:preferences#privacy for privacy.firstparty.isolate

CHANGELOG

this is now obsolete: FPI is not being worked on: it is superceeded by dFPI

...

[Thorin-Oakenpants]

FPI is no longer actively worked on: it will be superseded by dFPI which is being tracked in #1051