Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Some blocked third-party cookies are visible in the cookies widget #2223

Closed
iefremov opened this issue Nov 23, 2018 · 4 comments
Closed

Some blocked third-party cookies are visible in the cookies widget #2223

iefremov opened this issue Nov 23, 2018 · 4 comments
Assignees
Labels
bug closed/works-for-me feature/cookies feature/shields The overall Shields feature in Brave. priority/P3 The next thing for us to work on. It'll ride the trains.

Comments

@iefremov
Copy link
Contributor

Description

Some third-party cookies are allowed even when shields prohibit them.

Steps to Reproduce

  1. Google 'alexa top 500'
  2. Click the first link
  3. Check the site information balloon, you will see google cookies.

Actual result:

brave_cookie_leak

Expected result:

No 3rdparty cookies

Reproduces how often:

Always

Brave version (brave://version info)

Brave 0.57.4 Chromium: 71.0.3578.31 (Official Build) dev(64-bit)
Revision c88fdf2a4ce19a713615ca4fbde7a0d0b5fe2363-refs/branch-heads/3578@{#427}
OS Linux

Reproducible on current release:

  • Does it reproduce on brave-browser dev/beta builds?
    yes on dev, no on beta

Website problems only:

  • Does the issue resolve itself when disabling Brave Shields?
  • Is the issue reproducible on the latest version of Chrome?
    n/a

Additional Information

Doesn't reproduce when navigating to alexa directly. Seems like the allowed/blocked cookies in TabSpecificContentSettings are not updated properly during tab navigations (see BraveContentBrowserClient).

@iefremov
Copy link
Contributor Author

@bbondy FYI

@tildelowengrimm tildelowengrimm added the priority/P3 The next thing for us to work on. It'll ride the trains. label Nov 27, 2018
@iefremov iefremov self-assigned this Nov 28, 2018
@iefremov
Copy link
Contributor Author

iefremov commented Nov 28, 2018

It seems that the bug is caused by a race condition in the Chromium code.

Adding delay to the beginning of ChromeNetworkDelegate::OnCanGetCookies reproduces the bug in Chromium. The task posted in this method arrives to TabSpecificContentSettings right after its state is cleared in ClearContentSettingsExceptForNavigationRelatedSettings (this happens as the reaction for DidStartNavigation).

Still need to figure out how to fix this. It would be nice to upstream the fix.

@iefremov
Copy link
Contributor Author

Note: the bug actually doesn't affect the cookie store. The problem is related only to the cookie data shown in the page info widget (see the gif).

@bbondy bbondy added this to the 1.x Backlog milestone Dec 2, 2018
@iefremov iefremov mentioned this issue Jan 28, 2019
17 tasks
@rebron rebron modified the milestone: 1.x Backlog Feb 7, 2019
@iefremov iefremov changed the title Some third-party cookies are still not blocked Some blocked third-party cookies are visible in the cookies widget Aug 12, 2019
@iefremov
Copy link
Contributor Author

fixed :D

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug closed/works-for-me feature/cookies feature/shields The overall Shields feature in Brave. priority/P3 The next thing for us to work on. It'll ride the trains.
Projects
None yet
Development

No branches or pull requests

4 participants