Steps to replicate the issue (include links if applicable):
- Open the console
- Navigate to https://en.wikipedia.org/wiki/Main_Page
What happens?:
I see the following warning:
Error with Permissions-Policy header: Unrecognized origin: 'intake-analytics.wikimedia.org'.
What should have happened instead?:
I should not see the warning.
Other information (browser name/version, screenshots, etc.):
Browser name/version: Google Chrome v105.0.5195.52 (Official Build) (arm64)
OS:: macOS Monteray v12.5.1
Context:
The Permissions-Policy header is a map of feature to the list of allowed origins that can use that feature. In the parent task, we added a permissions policy header like:
Permissions-Policy: ch-ua-arch=(self "intake-analytics.wikimedia.org")
However, intake-analytics.wikimedia.org isn't a valid origin. An origin is a scheme-host-port triplet.
To fix this bug we should either:
- Replace all intake-analytics.wikimedia.org with https://intake-analytics.wikimedia.org in operations/puppet/modules/varnish/templates/analytics.inc.vcl.erb; or
- Remove all instances of intake-analytics.wikimedia.org, thereby stopping high-entropy client-hints being sent with analytics events