Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Learn More

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

How to detect cookieBehavior=5 (dFPi)?

  • 1 wótegrono
  • 1 ma toś ten problem
  • 1 naglěd
  • Slědne wótegrono wót cor-el

sinimawath
sinimawath
more options

Hello.

Our site has SSO authorization with 2 different domains.

To sync cookies there are 2 ways:

1 - Some kind of iframe hack, to make it hidden for users. 2 - If browser blocks thrid-party cookies (ex. Safari), we can move cookie sync to redirect flow (redirect to auth domain, then to subdomain and so on).

But then, cookie is under dFPI policy(cookieBehavior=5) - it's unclear, are cookies blocked or not.


So we have a bug, at 1 process of cookies sync (iframe) and authorizion is just dropped, every time as cookies sync.


If we had a chance to detect dFPI behavior of FireFox, we would move users to redirect flow.

Is there a way to detect cookieBehavior=5 (dFPi)?

Hello. Our site has SSO authorization with 2 different domains. '''To sync cookies there are 2 ways:''' 1 - Some kind of iframe hack, to make it hidden for users. 2 - If browser blocks thrid-party cookies (ex. Safari), we can move cookie sync to redirect flow (redirect to auth domain, then to subdomain and so on). But then, cookie is under dFPI policy(cookieBehavior=5) - it's unclear, are cookies blocked or not. So we have a bug, at 1 process of cookies sync (iframe) and authorizion is just dropped, every time as cookies sync. If we had a chance to detect dFPI behavior of FireFox, we would move users to redirect flow. Is there a way to detect cookieBehavior=5 (dFPi)?

Wšykne wótegrona (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Try to ask advice at a web development oriented forum.