Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

DuckDuckGo consider cookies on a new tab page with an iframe as third-party/can't disable ddg on new tab page

See original GitHub issue

Description

Two issues:

DuckDuckGo considers cookies on a new tab page with an iframe as third-party.
Doesn’t seem one can disable DuckDuckGo’s protections on the new tab page (e.g. can’t list chrome://newtab as unprotected)

I’ve reported a broken website related to this, but I thought I could provide far more context here:

At Glean, we have a Chrome extension which also provides a new new tab page for users. This new tab page is just an iframe with our website, https://app.glean.com. When blocking third party cookies on Chrome, our cookies are still sent. However, with the latest update of DuckDuckGo’s extension, our cookies don’t seem to be sent anymore, logging the user out and contributing to a poor experience on every new tab. We’ve heard this from many users. It might be related to the changes in https://github.com/duckduckgo/duckduckgo-privacy-extension/commit/5c8a42aba1cf23e9547f4acaacdd298eb235e07c and https://github.com/duckduckgo/duckduckgo-privacy-extension/commit/11bb055c5d7316d13f03ef74a2f41d25b9ddb5f7.

So our first question is this the expected behavior, because Chrome doesn’t consider this third-party at least?
Is there a way we can disable DuckDuckGo on the Chrome new tab page at least as a workaround?

Steps to Reproduce

Have an extension with a new tab page
The new tab page should just be an iframe to any website that can be iframed and has login with cookies

Expected behavior:

The user should be logged in to the website on the new tab page.

Actual behavior:

The user is logged out as cookies aren’t sent.

Versions

Extension: 2022-05-30
Browser: Chrome
OS: Mac

Additional Information

Issue Analytics

State:
Created a year ago
Comments:11 (4 by maintainers)

Top GitHub Comments

1reaction

SlayterDevcommented, Jun 10, 2022

Hey @chaitanya-scio! I’ve opened a PR to get that exception back. We had gone through some verification to re-enable the feature but I think we haven’t caught all the issues with new tab pages just yet as that’s a bit tricky. Sorry for the trouble!

1reaction

chaitanya-sciocommented, Jun 6, 2022

Things still look good so I’ll close out the issue! Appreciate the promptness again.