question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[BUG] Some cookies appear to be stuck (FF 86+ Strict Mode / cross-site protection / dynamic first party isolation)

See original GitHub issue

Describe the bug

It appears as if under certain conditions CAD was not able to remove eligible cookies on Firefox, even though it tries. Even though it appears consistently in my browser profile I found it difficult to exactly reproduce it in a new browser profile. Cookies got stuck there too, but not the same.

To Reproduce

Steps to reproduce the behavior:

  1. Go to a Google site (google.com, youtube.com). Had it with Wikimedia cookies however too.
  2. Make sure you got cookies set.
  3. Close the tab.
  4. CAD should now attempt to clear the cookies in question.

Expected behavior

All eligible cookies should get removed.

Screenshots

Three attempts over four seconds

image

That screenshot should hopefully clearly show that CAD does determine these cookies as eligible for removal, but still fails to remove them

Your System Info

  • OS: Windows 8.1
  • Browser Info: Firefox 80
  • CookieAutoDelete Version: 3.4.0

Additional context

To be fair, it could be that is a general Firefox issue. With https://addons.mozilla.org/firefox/addon/cookie-quick-manager/ I don’t seem to be able to delete the cookies selectively either, I need to use Firefox own built-in cookie manager.

The cookies on “accounts.youtube.com” are called CheckConnectionTempCookie. Are there any known issues in this area?

Issue Analytics

  • State:open
  • Created 3 years ago
  • Reactions:7
  • Comments:65 (29 by maintainers)

github_iconTop GitHub Comments

15reactions
kennethtran93commented, Sep 30, 2021

An update from https://bugzilla.mozilla.org/show_bug.cgi?id=1669716 reveals that a patch to the extension API for ‘partitionKey’ (needed for cross-site protection buckets) is added for milestone Firefox 94. Once this available on Dev channel, I’ll plan some time to look into getting it working again. I can’t guarantee that I’ll have it ready before Firefox 94 is released.

5reactions
kennethtran93commented, Nov 7, 2021

FF94 landed as the main release this week and after updating I’m running into this issue where CAD does not want to actually delete anything.
Has there been any progress with this issue with regards to FPI and custom (3rd party) blocking? @kennethtran93

The existing FPI (third party/cross-site tracking) option should still work. I’m working on the dynamic version (cross-site cookies). In the process of adding more info to the cookies so that you can select which partitioned cookie to keep/erase.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Firefox 86: strict enhanced tracking protection with dynamic ...
Firefox 86 + will have dynamic first party isolation (dFPI) enabled if a user chooses "Strict" in the Enhanced Tracking Protection (ETP) menu...
Read more >
Disable First party cookie isolation for one site - Mozilla Support
You want to disable FPI in about:config and set Enhanced Trackign Protection to 'Strict' in Settings-> Privacy and Security. This will enable ...
Read more >
Fix list for IBM WebSphere Application Server traditional V9
IBM WebSphere Application Server traditional provides periodic fixes for the base and Network Deployment editions of release V9. The following is a complete ......
Read more >
Quarterly Updates - The Chromium Projects
Q3 2022. Greetings,. Chrome Security is hiring! We're looking for a software engineer to join the team as a macOS/iOS platform security expert ......
Read more >
Investigation of Competition in Digital Markets
Process for Obtaining Responses to First-Party Requests . ... protective modes that really limit the opportunity of competitors and even, ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found