Page MenuHomePhabricator

Remove obsolete "Permissions-Policy: interest-cohort" header
Closed, ResolvedPublicBUG REPORT

Description

Steps to replicate the issue (include links if applicable):

  • visit en.wikipedia.org (anon)

What happens?:

  • Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'interest-cohort'
  • Error with Permissions-Policy header: Unrecognized origin: 'intake-analytics.wikimedia.org' (x5)

What should have happened instead?:
No error

Other information (browser name/version, screenshots, etc.):
freshly installed Chromium dev version

Event Timeline

Krinkle triaged this task as Low priority.EditedJul 29 2022, 11:01 PM
Krinkle subscribed.

This is not related to the Content-Security-Policy (CSP) header.

This is afaik not related to an Analytics service or feature. The intake-analytics.wikimedia.org is implicated by reference only as it naturally has to be listed for permission policies like this, but there is nothing the EventBus (intake-analytics) service or its configuration can improve to avoid this.

The interest-cohort header was added as part of T279804. Browsers that don't support it emit a warning about this, which does not affect any functionality and does not represent a production error. As per the aforementioned this, this header is implemented by the Traffic team and conceptually supported by the Security Team.

I'm rephrasing this as low prio clean up to remove the now obsolete header as the FLoC experiment has been concluded by Google afaik.

Krinkle renamed this task from Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'interest cohort' to Remove obsolete "Permissions-Policy: interest-cohort: header.Jul 29 2022, 11:02 PM
Krinkle renamed this task from Remove obsolete "Permissions-Policy: interest-cohort: header to Remove obsolete "Permissions-Policy: interest-cohort" header.

Change 889892 had a related patch set uploaded (by BCornwall; author: BCornwall):

[operations/puppet@production] Remove FLoC headers

https://gerrit.wikimedia.org/r/889892

BCornwall changed the task status from Open to In Progress.Feb 17 2023, 4:57 PM

Change 889892 merged by BCornwall:

[operations/puppet@production] Remove FLoC headers

https://gerrit.wikimedia.org/r/889892

Change 890895 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] varnish: update wikimedia-frontend.vcl.erb for 19b9dcb8264

https://gerrit.wikimedia.org/r/890895

Change 890895 merged by Ssingh:

[operations/puppet@production] varnish: update wikimedia-frontend.vcl.erb for 19b9dcb8264

https://gerrit.wikimedia.org/r/890895

BCornwall added a subscriber: ssingh.

Thanks @ssingh for that followup patch ._.