Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Exceptions for Clear Site Data on Close (Desktop), Startup (Android) #1221

Open
4 tasks done
Metrokoto opened this issue Jun 15, 2024 · 3 comments
Open
4 tasks done
Labels
enhancement New feature or request

Comments

@Metrokoto
Copy link

Preliminary checklist

  • I have read the README
  • I have searched existing issues for my feature request. This is a new issue (NOT a duplicate) and is not related to another issue.
  • I have searched wont fix issues and this request is not among them
  • This is a feature request for the Cromite browser; not the website nor F-Droid nor anything else.

Is your feature request related to privacy?

Yes

Is there a patch available for this feature somewhere?

N/A

Describe the solution you would like

The issue here is that clearing cookies for whitelisted sites on desktop is only possible using Cookie Auto-Delete, an extension, however this leaves cookies behind (I assume it is due to the partitioning patches we have) and the only way to fully purge cookies is to use Clear Site Data manually, or On Close.
It is not even possible to do this on Android yet, as we, unlike Kiwi Browser, do not have extension support, and, the only way is to purge it manually or use Clear Site Data on Startup.

This is annoying to do, as I have various websites, as many people do, who trust not to shove tracking cookies on our browser that are used simply for login sessions.
Librewolf addressed this problem by adding a toggle to "Always Save Cookies for this Site" and making it exempt those sites from clearing cookies via privacy.sanitize-on-shutdown.

I think it it would be beneficial to have a system introduced; that, like Librewolf, allows the exclusion of sites from having their cookies removed upon clearing site data, as this may also put us more on par with them in terms of privacy / feature offerings and may even attract some Librewolf users to switch to Cromite long-term.

Describe alternatives you have considered

Android: Not possible
Desktop: Cookie Auto-Delete Extension

@uazo
Copy link
Owner

uazo commented Jun 16, 2024

however this leaves cookies behind (I assume it is due to the partitioning patches we have)

ah, that's not good. but I am in doubt about the effectiveness of that extension.

addressed this problem by adding a toggle to "Always Save Cookies for this Site"

yes, I think I will try that too, but only when I am sure that the message communication will be switched off between different browsing contexts (see uazo/bromite-buildtools#322).

Imagine a situation like this:

1) TOP FRAME SITE A.COM 
2)        |--- IFRAME SITE B.COM

3) TOP FRAME SITE C.COM
4)        |--- IFRAME SITE B.COM

5) TOP FRAME SITE B.COM

if 5) is able to communicate with 2) and 4) deletion of storage is the only possibility

@uazo uazo added the enhancement New feature or request label Jun 16, 2024
uazo added a commit that referenced this issue Jun 25, 2024
fixed cookie access for extensions
@g-k-m
Copy link

g-k-m commented Jul 21, 2024

however this leaves cookies behind (I assume it is due to the partitioning patches we have)

ah, that's not good. but I am in doubt about the effectiveness of that extension.

addressed this problem by adding a toggle to "Always Save Cookies for this Site"

yes, I think I will try that too, but only when I am sure that the message communication will be switched off between different browsing contexts (see uazo/bromite-buildtools#322).

Imagine a situation like this:

1) TOP FRAME SITE A.COM 
2)        |--- IFRAME SITE B.COM

3) TOP FRAME SITE C.COM
4)        |--- IFRAME SITE B.COM

5) TOP FRAME SITE B.COM

if 5) is able to communicate with 2) and 4) deletion of storage is the only possibility

Wouldn't that be solved by just blocking third party cookies?

@uazo
Copy link
Owner

uazo commented Jul 24, 2024

Wouldn't that be solved by just blocking third party cookies?

no, these are different things.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants