$permissions

[uBlock-user]

@gorhill Seems AdGuard has implemented permissions policy modifier via $permissions, did they do anything different than gorhill/uBlock@af6c992 ?

[gorhill]

Forgot completely about that commit. I could implement this in the current dev cycle but not sure there are AdGuard lists using it, not worth it if not.

[gorhill]

For geolocation on Firefox, the documentation says partial support: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy#browser_compatibility:

Only supported through the allow attribute on <iframe> elements.

[uBlock-user]

Yeah it doesn't work in Firefox and Nightly.

[stephenhawk8054]

Ah I see

[gorhill]

Anyways, the header is injected in Firefox, if the browser does not interpret it, or interpret it in a different way that someone want it to be interpreted, please open an issue with Firefox devs.

---

Meta bugzilla entry for Permissions-Policy: https://bugzilla.mozilla.org/show_bug.cgi?id=permissions-policy

[uBlock-user]

@gorhill header not yet implemented as per - https://bugzilla.mozilla.org/show_bug.cgi?id=1694922

[gorhill]

gorhill/uBlock@5ebdbf3

[uBlock-user]

Does it work in Firefox without enabling the feature via about:config ?

[gorhill]

uBO does not treat the option any differently in any browser. I don't know whether Firefox might complain that the response header is not recognized.

---

Fixed typo: added not

[MasterKia]

https://github.com/uBlockOrigin/uBlock-issues/wiki/Static-filter-syntax#permissions

However I couldn't find the two examples in the commit ( oversized-images and unsized-media) on MDN:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Permissions_Policy#browser_compatibility

[uBlock-user]

Autoplay still cannot be blocked with the filter, hopefully this changes in future.

[gorhill]

couldn't find the two examples in the commit

I copied the example from AdGuard's documentation, just to show the difference on how to separate multiple directives.

There is this site which mentions those directives: https://docs.w3cub.com/http/headers/feature-policy#syntax. I don't know how reliable.

[gorhill]

@stephenhawk8054 Gave more thoughts to this and I think we should add it to uBlock filters -- Privacy list. I don't think a user interface component for this is the way to go given that so far it's an API supported only by one browser, and that the API is to serve advertisers in the first place.

[uBlock-user]

*$permissions=idle-detection=()|browsing-topics=()

That is a whole filter itself and should not be interpret as *$permissions=idle-detection=() and *$permissions=browsing-topics=(). So,

a exception filter would work look like this - @@*$permissions=idle-detection=()|browsing-topics=(),domain=example.org

[MasterKia]

@uBlock-user These do work:

||google.com^$all
@@||google.com^$doc

||google.com^$script,xhr,image
@@||google.com^$script

*$script,xhr,to=google.com|example.com
@@*$script,to=google.com

[uBlock-user]

Those are individual network type filters. idle-detection=() is a policy not a network type filter. Here's there's only one network type, that is $permissions.

[gorhill]

These do work

uBO does not have a permission policy value parser, and neither a CSP value parser, hence why the values can only be wholly excepted.

This has always been the way for CSP value, there was never a way to except only the script-src part of a filter such as *$csp=worker-src 'none';script-src 'none', and unsurprisingly it's also the case for permissions= option.

[stephenhawk8054]

I guess we can add Attribution Reporting: https://developer.chrome.com/docs/privacy-sandbox/attribution-reporting/ ?

Measure when an ad click or view leads to a conversion, such as a purchase on an advertiser site.

*$permissions=attribution-reporting=(),from=~localhost

[Yuki2718]

BTW it will be convenient if we can exclude only these permission rules from the logger. As they're always applied, pretty much are noise.

[MasterKia]

Yes, should be disabled by default in the logger.

[gorhill]

gorhill/uBlock@a9ff41a

[gorhill]

I can make "not permissions" be default filter expression if you majority agrees.

[ghost]

Save the status? How it's done in popup?

[gorhill]

Too much code to add for now, I want quick and easy.