Sine we moved commonly used in-banner JS into campaign-associated mixins, we are allowing CentralNotice admins to create new cookies quite easily. This could lead to a proliferation of campaign-specific cookies with year-long expiries. To prevent this, use KVStore (LocalStorage) for non-Fundraising campaigns. For now, because of the upcoming year-end campaigns, we'll keep Fundraising on the proven and broadly compatible cookie system.
Description
Details
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | Krinkle | T110353 Audit use of cookies | |||
Open | None | T108849 Move CentralNotice stuff out of cookies | |||
Resolved | • AndyRussG | T117650 CentralNotice: use KVStore instead of cookies for mixins that create cookies, except for Fundraising |
Event Timeline
Change 251026 had a related patch set uploaded (by AndyRussG):
KVStore: Allow custom TTL for items
Change 251284 had a related patch set uploaded (by AndyRussG):
Campaign categories using legacy: global config var and data property
Change 251419 had a related patch set uploaded (by AndyRussG):
Make cookiesEnabled() a public mw.centralNotice function
Change 251462 had a related patch set uploaded (by AndyRussG):
impressionDiet: Use KV store instead of cookies for campaign categories using legacy
Change 251284 merged by Ejegg:
Campaign categories using legacy: global config var and data property
Change 251419 merged by Ejegg:
Make cookiesEnabled() a public mw.centralNotice function
Change 251462 merged by jenkins-bot:
impressionDiet: Use KV store instead of cookies for campaign categories using legacy
Change 251708 had a related patch set uploaded (by AndyRussG):
impressionDiet: fix and minor improvements in use KV store feature
Change 251711 had a related patch set uploaded (by AndyRussG):
largeBannerLimit: Use KV store instead of cookies for campaign categories using legacy
Change 251708 merged by jenkins-bot:
impressionDiet: fix and minor improvements in use KV store feature
Change 251711 merged by jenkins-bot:
largeBannerLimit: Use KV store instead of cookies for campaign categories not using legacy