[Mozilla Enterprise] Cookie Policy Not Correct

[Eddie Rowe]

Thanks. I corrected the syntax issue with the “Allow” line so I see both sites now in about:policies.  I am still not seeing the AcceptThirdParty line in about:policies, but it does appear that third-party cookies are being blocked by the policy since I can visit a site and see that third party cookies other than arcgis.com are blocked by my policy.

Cookies           Allow               "http://arcgis.com/"
                                                "https://arcgis.com/"
Default                        true
                        ExpireAtSessionEnd   true
                        Locked                         false

From: Mike Kaply <mkaply at mozilla.com>
Sent: Thursday, May 28, 2020 10:53 AM
To: Eddie Rowe <eddie.rowe at tdhca.state.tx.us>
Cc: enterprise at mozilla.org
Subject: Re: [Mozilla Enterprise] Cookie Policy Not Correct

Allow is an array, so you need to do it as one item:

"Allow": ["http://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=HLacvEr-FQSQpbc62rXwZzVHymKvvv5VBY9jR5_PPvs&e=>", "https://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=lNJZoeN90nhpt4cN_yQiJOC70vP-8YH5JIuaBFfKLjs&e=>"],

When things are duplicated in JSON, it picks the last one.

Mike

On Thu, May 28, 2020 at 10:40 AM Eddie Rowe <eddie.rowe at tdhca.state.tx.us<mailto:eddie.rowe at tdhca.state.tx.us>> wrote:
Our policies.json is setup as follow and has not changed since created at the end of 2019: (just a snippet)

    "Cookies": {
              "Allow": ["http://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=HLacvEr-FQSQpbc62rXwZzVHymKvvv5VBY9jR5_PPvs&e=>"],
              "Allow": ["https://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=lNJZoeN90nhpt4cN_yQiJOC70vP-8YH5JIuaBFfKLjs&e=>"],
              "Default": true,
              "AcceptThirdparty": "never",
              "ExpireAtSessionEnd": true,
              "Locked": false
              },

But Firefox ESR 68.8.0 (x64) does not show both the http site and the AcceptThirdParty does not appear in about:policies.  Do I have a syntax issue?[cid:image001.png at 01D634DF.E24A9BA0]
_______________________________________________
Enterprise mailing list
Enterprise at mozilla.org<mailto:Enterprise at mozilla.org>
https://mail.mozilla.org/listinfo/enterprise<https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=hKTsEUz95mgkfMzyjMZzrFLdKELmfP5rIywY66FYRZs&e=>

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise<https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=hKTsEUz95mgkfMzyjMZzrFLdKELmfP5rIywY66FYRZs&e=> or send an email to enterprise-request at mozilla.org<mailto:enterprise-request at mozilla.org> with a subject of "unsubscribe"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200528/a243de04/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 12316 bytes
Desc: image001.png
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200528/a243de04/attachment.png>