Bug 210487 - [SOUP] ResourceLoadStatistics: add support for isolated sessions
Summary: [SOUP] ResourceLoadStatistics: add support for isolated sessions
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKitGTK (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: Gtk, LayoutTestFailure
Depends on:
Blocks:
 
Reported: 2020-04-14 04:49 PDT by Carlos Garcia Campos
Modified: 2020-06-16 07:41 PDT (History)
4 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Carlos Garcia Campos 2020-04-14 04:49:12 PDT
Looking at the cocoa code I'm not entirely sure what the expected behavior is, and I think the layout tests just check that an isolated session is used, but not the behavior when it's used.
Comment 1 Michael Catanzaro 2020-06-09 13:10:49 PDT
Discussion on this here: https://bugs.webkit.org/show_bug.cgi?id=210184#c11
Comment 2 Michael Catanzaro 2020-06-12 06:47:50 PDT
In particular, from bug #210184:

> GLib doesn't have any way to prevent session resumption, so it would be impossible to do in libsoup alone without changes in GLib. I could add GLib API for you if desired. Would be easy to do, and would allow removing a hack we use to disable session resumption when running tests. (Currently calling g_test_init() will disable session resumption, because there's no API tests can use to do that, so this behavior has to be tested manually.)

I'd be good to hear more from John about the intent behind isolated network sessions, though. Is there more that's not supposed to be shared besides the TLS session? (Disk cache? Could websites fingerprint users based on what resources they have in disk cache?)
Comment 3 Carlos Garcia Campos 2020-06-16 07:02:38 PDT
Yes, please, I still don't know what the expected behavior is to see how to implement it in libsoup if needed.
Comment 4 Carlos Garcia Campos 2020-06-16 07:16:03 PDT
I have another question for John or Youenn. I've noticed that resource load stats are removed automatically for origins when the cookies or hsts cache is removed for them, but it doesn't seem to be possible to remove the stats specifically for a set of registrable domains, since it's not possible to fetch the list of registrable domains with stats. Is that on purpose? I started to add support for fetch/remove but then I realized that maybe it was not implemented on purpose.
Comment 5 Carlos Garcia Campos 2020-06-16 07:41:33 PDT
(In reply to Carlos Garcia Campos from comment #4)
> I have another question for John or Youenn. I've noticed that resource load
> stats are removed automatically for origins when the cookies or hsts cache
> is removed for them, but it doesn't seem to be possible to remove the stats
> specifically for a set of registrable domains, since it's not possible to
> fetch the list of registrable domains with stats. Is that on purpose? I
> started to add support for fetch/remove but then I realized that maybe it
> was not implemented on purpose.

I misread the code, deleting stats for a specific host is supported, it's weird that the display name is used, though. But fetch is not implemented.