[Mozilla Enterprise] Cookie Policy Not Correct

[Eddie Rowe]

Thanks so much!  I didn’t realize the settings were case sensitive!

From: Mike Kaply <mkaply at mozilla.com>
Sent: Thursday, May 28, 2020 11:17 AM
To: Eddie Rowe <eddie.rowe at tdhca.state.tx.us>
Cc: enterprise at mozilla.org
Subject: Re: [Mozilla Enterprise] Cookie Policy Not Correct

Should be AcceptThirdParty

Missed that in the first pass.

Mike

On Thu, May 28, 2020 at 11:07 AM Eddie Rowe <eddie.rowe at tdhca.state.tx.us<mailto:eddie.rowe at tdhca.state.tx.us>> wrote:
Thanks. I corrected the syntax issue with the “Allow” line so I see both sites now in about:policies.  I am still not seeing the AcceptThirdParty line in about:policies, but it does appear that third-party cookies are being blocked by the policy since I can visit a site and see that third party cookies other than arcgis.com<https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=iwz-XYrMd2cw_V_9puey_UDUeUCpVvTD-c2QU935MHc&s=iaxw8SUH89244TAK_Lrf3Lzdei5xAK9ApoCPjFCStQU&e=> are blocked by my policy.

Cookies           Allow               "http://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=iwz-XYrMd2cw_V_9puey_UDUeUCpVvTD-c2QU935MHc&s=a_TWSz_ztMzmK-heXoWnmncptiPGP0yk7MtoJMPfk-w&e=>"
                                                "https://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=iwz-XYrMd2cw_V_9puey_UDUeUCpVvTD-c2QU935MHc&s=m8VOwhrg8_TgqL46dc40bBZwTD48ws-177JSbZfn8Hg&e=>"
Default                        true
                        ExpireAtSessionEnd   true
                        Locked                         false

From: Mike Kaply <mkaply at mozilla.com<mailto:mkaply at mozilla.com>>
Sent: Thursday, May 28, 2020 10:53 AM
To: Eddie Rowe <eddie.rowe at tdhca.state.tx.us<mailto:eddie.rowe at tdhca.state.tx.us>>
Cc: enterprise at mozilla.org<mailto:enterprise at mozilla.org>
Subject: Re: [Mozilla Enterprise] Cookie Policy Not Correct

Allow is an array, so you need to do it as one item:

"Allow": ["http://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=HLacvEr-FQSQpbc62rXwZzVHymKvvv5VBY9jR5_PPvs&e=>", "https://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=lNJZoeN90nhpt4cN_yQiJOC70vP-8YH5JIuaBFfKLjs&e=>"],

When things are duplicated in JSON, it picks the last one.

Mike

On Thu, May 28, 2020 at 10:40 AM Eddie Rowe <eddie.rowe at tdhca.state.tx.us<mailto:eddie.rowe at tdhca.state.tx.us>> wrote:
Our policies.json is setup as follow and has not changed since created at the end of 2019: (just a snippet)

    "Cookies": {
              "Allow": ["http://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=HLacvEr-FQSQpbc62rXwZzVHymKvvv5VBY9jR5_PPvs&e=>"],
              "Allow": ["https://arcgis.com/<https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=lNJZoeN90nhpt4cN_yQiJOC70vP-8YH5JIuaBFfKLjs&e=>"],
              "Default": true,
              "AcceptThirdparty": "never",
              "ExpireAtSessionEnd": true,
              "Locked": false
              },

But Firefox ESR 68.8.0 (x64) does not show both the http site and the AcceptThirdParty does not appear in about:policies.  Do I have a syntax issue?[cid:image001.png at 01D634E2.B2C386A0]
_______________________________________________
Enterprise mailing list
Enterprise at mozilla.org<mailto:Enterprise at mozilla.org>
https://mail.mozilla.org/listinfo/enterprise<https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=hKTsEUz95mgkfMzyjMZzrFLdKELmfP5rIywY66FYRZs&e=>

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise<https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=hKTsEUz95mgkfMzyjMZzrFLdKELmfP5rIywY66FYRZs&e=> or send an email to enterprise-request at mozilla.org<mailto:enterprise-request at mozilla.org> with a subject of "unsubscribe"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200528/491cc402/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 12316 bytes
Desc: image001.png
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200528/491cc402/attachment.png>