Security/Contextual Identity Project/Tracking

From MozillaWiki
Jump to navigation Jump to search

Origin Attributes

To implement containers for the Contextual Identity, we are adding a new Origin Attribute called "usercontext". However security checks in gecko sometimes use the URL or other properties instead of a proper Origin check. So the first step then is to fix up all the places in Gecko where we should be using an Origin. These bugs are tagged with a whiteboard tag of [oa* (i.e. [oa], [oa-testing] etc).

Active Bugs

Bugs which are assigned and being worked on.

No results.

0 Total; 0 Open (0%); 0 Resolved (0%); 0 Verified (0%);


Assigned, but not started

These bugs have an owner, but their status is 'NEW' indicating that they are not being worked on yet.

No results.

0 Total; 0 Open (0%); 0 Resolved (0%); 0 Verified (0%);


Backlog (all unowned)

Bugs looking for an owner.

Full Query
ID Whiteboard Summary Status Assigned to Resolution
1273058 [userContextId][OA] mContentViewer should be null when setting origin attributes on docshell NEW
1283320 [userContextId][domsecurity-backlog2][OA] Make History aware of userContextId NEW
1284985 [userContextId][domsecurity-backlog3][OA] cookies being loaded from about:newtab should use a privatebrowsing mode value >1 in the OriginAttributes instead of a temp userContextId NEW
1300706 [OA][domsecurity-backlog1] firstPartyDomain shouldn't be propagated to mozbrowser frame NEW
1319184 [OA] remove the IsInPrivateBrowsing boolean from the GetFavicon related code in DocShell NEW
1321646 [OA] Figure out why the nsDocShell::CopyFavicon assert fails and fix it NEW
1329572 [OA][domsecurity-backlog3] Consider making origin attributes become a XPCOM object NEW

7 Total; 7 Open (100%); 0 Resolved (0%); 0 Verified (0%);


Testing Bugs

Origin Testing bugs are tagged with [oa-testing]

Full Query
ID Whiteboard Summary Status Assigned to Resolution
1257456 [OA-testing] tests for restore into existing tab with correct userContextId NEW
1264152 btpp-active[OA-testing][tor-testing][domsecurity-backlog1] Create a tag for OriginAttribute mochitests NEW
1271873 [OA-testing][domsecurity-backlog2] Add a test case to ensure that Sandbox handles userContextId correctly NEW
1314449 [necko-would-take][tor-testing][meta] Create testing framework for proxy-bypass tests for Firefox NEW
1314793 [tor-mobile][tor-testing] Creating Testing Framework for Proxy Bypasses for Firefox Android REOPENED
1337868 [OA-testing][tor-testing][domsecurity-backlog1] Add Origin Attribute connection isolation tests for HTTP2, TLS, and WebSockets NEW
1365623 [necko-would-take][tor-testing] Create a proxy bypass test for SourceMap NEW

7 Total; 7 Open (100%); 0 Resolved (0%); 0 Verified (0%);

https://bugzilla.mozilla.org/buglist.cgi?query_based_on=usercontextid%20and%20oa&status_whiteboard_type=anywordssubstr&query_format=advanced&status_whiteboard=[TOR%2C[oa-testing&known_name=usercontextid%20and%20oa

Non-OA Containers Bugs

All bugs for the Contextual Identity projects which are NOT part of origin attributes fix-ups. These bugs are tagged in the whiteboard with [userContextId].

Active Containers Bugs

Bugs which are assigned and being worked on.

Full Query
ID Whiteboard Summary Status Assigned to Resolution
1331595 [userContextId] The new tab button's container menu should allow middle/accel-click to create new related tabs with the desired container ASSIGNED Kestrel

1 Total; 1 Open (100%); 0 Resolved (0%); 0 Verified (0%);


Assigned, but not started, container bugs

These bugs have an owner, but their status is 'NEW' indicating that they are not being worked on yet.

Full Query
ID Whiteboard Summary Status Assigned to Resolution
1320378 [userContextId][domsecurity-backlog] warning users when removing containers that aren't currently being used NEW Danny Colin [:sdk]

1 Total; 1 Open (100%); 0 Resolved (0%); 0 Verified (0%);


Backlog (all unowned) container bugs

Bugs looking for an owner.

Full Query
ID Whiteboard Summary Status Assigned to Resolution
1199470 [userContextId][domsecurity-backlog3] Let users Clear History for a specific Container NEW
1213290 [userContextId][domsecurity-backlog] Enable "usercontext" on bookmarks NEW
1245262 [userContextId][userContextId-UI][blocked] keyboard shortcuts for opening new container tabs REOPENED
1245502 [userContextId][userContextId-UI] Would be nice to see the container for each tab in about:sessionrestore NEW
1249348 [userContextId][domsecurity-backlog3] compartmentalizing certificate overrides via containers NEW
1253006 [userContextId] compartmentalize the HSTS cache via containers NEW
1272043 [domsecurity-backlog3][usercontextId] adding the ability to open containers via the taskbar jump list/dock NEW
1280549 [userContextId] [a11y] Make container type for current tab more easily accessible to screen reader users NEW
1280697 [userContextId][tpi:+] Assign containers based on the desktop UNCONFIRMED
1283495 [userContextId][domsecurity-backlog] Add the ability to assign a window to a container NEW
1285518 [domsecurity-backlog][usercontextId] Telemetry wanted: How many custom containers are created. NEW
1287001 [userContextId][domsecurity-backlog][userContextId-UI] Add a column in the cookie manager for container ID NEW
1288504 [userContextId][domsecurity-backlog2] Customize about:newtab per Container NEW
1288858 [userContextId][domsecurity-backlog3][sync-engine-addition] Should custom containers be synced across devices? NEW
1291672 [userContextId][domsecurity-backlog1] Banking icon for containers isn't possible localise NEW
1292241 [domsecurity-backlog][userContextId] UX tests for Containers NEW
1293420 [userContextId] Should we disable mix-blend-mode because it can lead to a history leakage attack? NEW
1295750 [userContextId][domsecurity-backlog] integrating disposable/one-shot containers into DevTools NEW
1297973 [userContextId] [domsecurity-active] Design UX for presenting userContextId in History UI NEW
1298064 [domsecurity-active][userContextId] Container tab menu on long press add menu not present after customize NEW
1302597 [userContextId][ux][domsecurity-active] Design UX for presenting userContextId in Awesomebar result NEW
1303911 [userContextId][domsecurity-backlog] restoring a single container tab quickly opens a second tab that disappears instantly NEW
1306684 [domsecurity-backlog][userContextId] UX tests for Containers using mozscreenshots NEW
1311845 [userContextId][domsecurity-backlog] [Containers] Easier New Container Tab Experience NEW
1315055 [userContextId][domsecurity-backlog] adding checks for mUserContextId collisions when creating containers via about:containers NEW
1317544 [userContextId][domsecurity-backlog] Add ability to group container tabs NEW
1318352 [domsecurity-backlog][userContextId] Consider creating new tabs in the same container as the currently active tab when pressing new tab button NEW
1318652 [userContextId] automatic contextual container based on domain (or regex) UNCONFIRMED
1320355 [userContextId][domsecurity-backlog] Prevent ability to visually select multiple colours/icons under "Add New Container" NEW
1320368 [userContextId][domsecurity-backlog] changing preferences under about:preferences within containers NEW
1320757 [userContextId][domsecurity-backlog] Containers don't work in permanent private mode NEW
1321914 [userContextId] Idea: Separate homepage / new tag page for Container Tabs NEW
1322387 [userContextId][domsecurity-backlog] tabbrowser.xml should use weak ref observers NEW
1323873 [userContextId][domsecurity-backlog3] Support assigning a different user context on navigation to a new page in an existing tab, leave past history entries unchanged NEW
1325874 [fingerprinting][fp-triaged][domsecurity-backlog2][userContextId] Consider seperating page content history for userContextId NEW
1325884 [userContextId] Container tabs should have options for separate history and URL completion NEW
1328935 [userContextId][domsecurity-backlog] changing colour/icon under about:preferences#containers will refresh all the icons/colours NEW
1329453 [userContextId][domsecurity-backlog] Show an appropriate menu item if all Containers are removed NEW
1333214 [userContextId][domsecurity-backlog] Container properties: accesskeys don't work under macOS NEW
1334722 [userContextId][domsecurity-backlog] Consider pref to control maintaining container state across links NEW
1337937 [userContextId][domsecurity-backlog] "Open Container Tab" under hamburger menu not always appearing/disappearing when enabling containers NEW
1338735 [userContextId][domsecurity-backlog] removing all associated container cookies when containers are disabled/removed NEW
1345643 [domsecurity-backlog3][userContextId] about:preferences#containers accessible via URL even though privacy.userContext.enabled;false NEW
1355433 [userContextId][domsecurity-backlog] Add preference to disable "related tab" code opening in the same container NEW
1365019 [userContextId][domsecurity-backlog2] Have containers isolate more things, like extensions NEW
1372103 [userContextId][domsecurity-backlog1] viewing caches from differnt container in about:cache NEW
1375598 [userContextId][domsecurity-backlog2] Container tabs are triggered accidentally when switching back to Firefox NEW
1393822 [usercontextId] Long touch new tab doesn't open containers menu with touch screen NEW
1406371 [usercontextId] Make a preference to control what the usercontextId is when creating a new tab NEW

49 Total; 49 Open (100%); 0 Resolved (0%); 0 Verified (0%);