Remove "google|gmail" from trustedViewerHosts in config.js

[dreamofabear]

Context: #25027 (comment)

[dreamofabear]

@mrjoro FYI this helps decouple "google" from our source code.

@ampproject/wg-infra Is this related to any planned OpenJS migration work?

[rsimha]

Yes, this will be included in the list of tasks for the Open JS migration. There's a tracking issue at https://github.com/ampproject/wg-infra/issues/18 with a larger discussion that includes folks from @ampproject/wg-caching.

[rsimha]

[Infra triage] Since this issue was filed two years ago, the OpenJS migration was completed. See ampproject/wg-caching#13 (comment) for more details.

However, the offending lines are still in our codebase.

amphtml/src/config.js

Lines 97 to 112 in e5c57a6

	/**
	* These domains are trusted with more sensitive viewer operations such as
	* propagating the referrer. If you believe your domain should be here,
	* file the issue on GitHub to discuss. The process will be similar
	* (but somewhat more stringent) to the one described in the [3p/README.md](
	* https://github.com/ampproject/amphtml/blob/main/3p/README.md)
	*
	* {!Array<!RegExp>}
	*/
	trustedViewerHosts: [
	/(^|\.)google\.(com?|[a-z]{2}|com?\.[a-z]{2}|cat)$/,
	/(^|\.)gmail\.(com|dev)$/,
	],
	// Optional fallback API if amp-geo is left unpatched
	geoApi: env['geoApiUrl'] || getMetaUrl('amp-geo-api'),
	};

Assigning to @jridgewell for comment on if / how they can be removed from AMP. If they must stay, this issue can be closed.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 7 days if no further activity occurs. Thank you for your contributions.