[Mozilla Enterprise] Cookie Policy Not Correct
Mike Kaply
mkaply at mozilla.com
Thu May 28 16:17:12 UTC 2020
Should be AcceptThird*P*arty
Missed that in the first pass.
Mike
On Thu, May 28, 2020 at 11:07 AM Eddie Rowe <eddie.rowe at tdhca.state.tx.us>
wrote:
> Thanks. I corrected the syntax issue with the “Allow” line so I see both
> sites now in about:policies. I am still not seeing the AcceptThirdParty
> line in about:policies, but it does appear that third-party cookies are
> being blocked by the policy since I can visit a site and see that third
> party cookies other than arcgis.com are blocked by my policy.
>
>
>
> Cookies Allow "http://arcgis.com/"
>
> "https://arcgis.com/"
>
> Default true
>
> ExpireAtSessionEnd true
>
> Locked false
>
>
>
> *From:* Mike Kaply <mkaply at mozilla.com>
> *Sent:* Thursday, May 28, 2020 10:53 AM
> *To:* Eddie Rowe <eddie.rowe at tdhca.state.tx.us>
> *Cc:* enterprise at mozilla.org
> *Subject:* Re: [Mozilla Enterprise] Cookie Policy Not Correct
>
>
>
> Allow is an array, so you need to do it as one item:
>
>
>
> "Allow": ["http://arcgis.com/
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=HLacvEr-FQSQpbc62rXwZzVHymKvvv5VBY9jR5_PPvs&e=>",
> "https://arcgis.com/
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=lNJZoeN90nhpt4cN_yQiJOC70vP-8YH5JIuaBFfKLjs&e=>"],
>
>
>
>
> When things are duplicated in JSON, it picks the last one.
>
>
>
> Mike
>
>
>
> On Thu, May 28, 2020 at 10:40 AM Eddie Rowe <eddie.rowe at tdhca.state.tx.us>
> wrote:
>
> Our policies.json is setup as follow and has not changed since created at
> the end of 2019: (just a snippet)
>
>
>
> "Cookies": {
>
> "Allow": ["http://arcgis.com/
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=HLacvEr-FQSQpbc62rXwZzVHymKvvv5VBY9jR5_PPvs&e=>
> "],
>
> "Allow": ["https://arcgis.com/
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=lNJZoeN90nhpt4cN_yQiJOC70vP-8YH5JIuaBFfKLjs&e=>
> "],
>
> "Default": true,
>
> "AcceptThirdparty": "never",
>
> "ExpireAtSessionEnd": true,
>
> "Locked": false
>
> },
>
>
>
> But Firefox ESR 68.8.0 (x64) does not show both the http site and the
> AcceptThirdParty does not appear in about:policies. Do I have a syntax
> issue?
>
> _______________________________________________
> Enterprise mailing list
> Enterprise at mozilla.org
> https://mail.mozilla.org/listinfo/enterprise
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=hKTsEUz95mgkfMzyjMZzrFLdKELmfP5rIywY66FYRZs&e=>
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=hKTsEUz95mgkfMzyjMZzrFLdKELmfP5rIywY66FYRZs&e=>
> or send an email to enterprise-request at mozilla.org with a subject of
> "unsubscribe"
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200528/82a541c7/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 12316 bytes
Desc: not available
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200528/82a541c7/attachment.png>
More information about the Enterprise
mailing list