Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Поиск в Поддержке

Избегайте мошенников, выдающих себя за службу поддержки. Мы никогда не попросим вас позвонить, отправить текстовое сообщение или поделиться личной информацией. Сообщайте о подозрительной активности, используя функцию «Пожаловаться».

Learn More

How to detect cookieBehavior=5 (dFPi)?

  • 1 ответ
  • 1 имеет эту проблему
  • 1 просмотр
  • Последний ответ от cor-el

more options

Hello.

Our site has SSO authorization with 2 different domains.

To sync cookies there are 2 ways:

1 - Some kind of iframe hack, to make it hidden for users. 2 - If browser blocks thrid-party cookies (ex. Safari), we can move cookie sync to redirect flow (redirect to auth domain, then to subdomain and so on).

But then, cookie is under dFPI policy(cookieBehavior=5) - it's unclear, are cookies blocked or not.


So we have a bug, at 1 process of cookies sync (iframe) and authorizion is just dropped, every time as cookies sync.


If we had a chance to detect dFPI behavior of FireFox, we would move users to redirect flow.

Is there a way to detect cookieBehavior=5 (dFPi)?

Hello. Our site has SSO authorization with 2 different domains. '''To sync cookies there are 2 ways:''' 1 - Some kind of iframe hack, to make it hidden for users. 2 - If browser blocks thrid-party cookies (ex. Safari), we can move cookie sync to redirect flow (redirect to auth domain, then to subdomain and so on). But then, cookie is under dFPI policy(cookieBehavior=5) - it's unclear, are cookies blocked or not. So we have a bug, at 1 process of cookies sync (iframe) and authorizion is just dropped, every time as cookies sync. If we had a chance to detect dFPI behavior of FireFox, we would move users to redirect flow. Is there a way to detect cookieBehavior=5 (dFPi)?

Все ответы (1)

more options

Try to ask advice at a web development oriented forum.