[Mozilla Enterprise] Cookie Policy Not Correct

[Timo Pietilä]

json can be frustratingly sensitive to errors. For that reason I have 
used enterprise policy generator -addon. Saves many headaches from 
banging your head in the wall.

Timo Pietilä

On 28.5.2020 19.26, Eddie Rowe wrote:
> Thanks so much!  I didn’t realize the settings were case sensitive!
> 
> *From:*Mike Kaply <mkaply at mozilla.com>
> *Sent:* Thursday, May 28, 2020 11:17 AM
> *To:* Eddie Rowe <eddie.rowe at tdhca.state.tx.us>
> *Cc:* enterprise at mozilla.org
> *Subject:* Re: [Mozilla Enterprise] Cookie Policy Not Correct
> 
> Should be AcceptThird*P*arty
> 
> Missed that in the first pass.
> 
> Mike
> 
> On Thu, May 28, 2020 at 11:07 AM Eddie Rowe 
> <eddie.rowe at tdhca.state.tx.us <mailto:eddie.rowe at tdhca.state.tx.us>> wrote:
> 
>     Thanks. I corrected the syntax issue with the “Allow” line so I see
>     both sites now in about:policies.  I am still not seeing the
>     AcceptThirdParty line in about:policies, but it does appear that
>     third-party cookies are being blocked by the policy since I can
>     visit a site and see that third party cookies other than arcgis.com
>     <https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=iwz-XYrMd2cw_V_9puey_UDUeUCpVvTD-c2QU935MHc&s=iaxw8SUH89244TAK_Lrf3Lzdei5xAK9ApoCPjFCStQU&e=>
>     are blocked by my policy.
> 
>     Cookies           Allow               "http://arcgis.com/
>     <https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=iwz-XYrMd2cw_V_9puey_UDUeUCpVvTD-c2QU935MHc&s=a_TWSz_ztMzmK-heXoWnmncptiPGP0yk7MtoJMPfk-w&e=>"
> 
> 
>                                                     
>     "https://arcgis.com/
>     <https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=iwz-XYrMd2cw_V_9puey_UDUeUCpVvTD-c2QU935MHc&s=m8VOwhrg8_TgqL46dc40bBZwTD48ws-177JSbZfn8Hg&e=>"
> 
> 
>     Default                        true
> 
>                              ExpireAtSessionEnd   true
> 
>                              Locked                         false
> 
>     *From:*Mike Kaply <mkaply at mozilla.com <mailto:mkaply at mozilla.com>>
>     *Sent:* Thursday, May 28, 2020 10:53 AM
>     *To:* Eddie Rowe <eddie.rowe at tdhca.state.tx.us
>     <mailto:eddie.rowe at tdhca.state.tx.us>>
>     *Cc:* enterprise at mozilla.org <mailto:enterprise at mozilla.org>
>     *Subject:* Re: [Mozilla Enterprise] Cookie Policy Not Correct
> 
>     Allow is an array, so you need to do it as one item:
> 
>     "Allow": ["http://arcgis.com/
>     <https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=HLacvEr-FQSQpbc62rXwZzVHymKvvv5VBY9jR5_PPvs&e=>",
>     "https://arcgis.com/
>     <https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=lNJZoeN90nhpt4cN_yQiJOC70vP-8YH5JIuaBFfKLjs&e=>"],
> 
> 
>     When things are duplicated in JSON, it picks the last one.
> 
>     Mike
> 
>     On Thu, May 28, 2020 at 10:40 AM Eddie Rowe
>     <eddie.rowe at tdhca.state.tx.us <mailto:eddie.rowe at tdhca.state.tx.us>>
>     wrote:
> 
>         Our policies.json is setup as follow and has not changed since
>         created at the end of 2019: (just a snippet)
> 
>              "Cookies": {
> 
>                        "Allow": ["http://arcgis.com/
>         <https://urldefense.proofpoint.com/v2/url?u=http-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=HLacvEr-FQSQpbc62rXwZzVHymKvvv5VBY9jR5_PPvs&e=>"],
> 
>                        "Allow": ["https://arcgis.com/
>         <https://urldefense.proofpoint.com/v2/url?u=https-3A__arcgis.com_&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=lNJZoeN90nhpt4cN_yQiJOC70vP-8YH5JIuaBFfKLjs&e=>"],
> 
>                        "Default": true,
> 
>                        "AcceptThirdparty": "never",
> 
>                        "ExpireAtSessionEnd": true,
> 
>                        "Locked": false
> 
>                        },
> 
>         But Firefox ESR 68.8.0 (x64) does not show both the http site
>         and the AcceptThirdParty does not appear in about:policies.  Do
>         I have a syntax issue?
> 
>         _______________________________________________
>         Enterprise mailing list
>         Enterprise at mozilla.org <mailto:Enterprise at mozilla.org>
>         https://mail.mozilla.org/listinfo/enterprise
>         <https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=hKTsEUz95mgkfMzyjMZzrFLdKELmfP5rIywY66FYRZs&e=>
> 
>         To unsubscribe from this list, please visit
>         https://mail.mozilla.org/listinfo/enterprise
>         <https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=34zcAhMJ3BQDEsaTj4W-TLirRdOBONWZM12lCPC_4zA&s=hKTsEUz95mgkfMzyjMZzrFLdKELmfP5rIywY66FYRZs&e=>
>         or send an email to enterprise-request at mozilla.org
>         <mailto:enterprise-request at mozilla.org> with a subject of
>         "unsubscribe"
> 
> 
> _______________________________________________
> Enterprise mailing list
> Enterprise at mozilla.org
> https://mail.mozilla.org/listinfo/enterprise
> 
> To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-request at mozilla.org with a subject of "unsubscribe"
>