Adding a site setting manually for 'foo.com' does not override existing settings for 'foo.com:443' |
||||
Issue descriptionSteps to repro: 1. Navigate to https://tests.peter.sh/notification-generator/ 2. Grant notification permission 3. Go to chrome://settings/content/notifications 4. Add 'https://tests.peter.sh' to the blocked list via the 'Add' button which provides a free-form text box. Observed results: - https://tests.peter.sh is added to the block list (expected) BUT https://tests.peter.sh:443 still appears under the 'Allow' list - Typing 'Notification.permission' in the devtools console on https://tests.peter.sh/notification-generator/ returns 'allowed' and notifications can still display. Expected results: - https://tests.peter.sh appears in the block list AND https://tests.peter.sh:443 disappears from 'Allow' list - Typing 'Notification.permission' in the devtools console on https://tests.peter.sh/notification-generator/ returns 'blocked' and notifications do not display. ---- Note that if permission was never granted for https://tests.peter.sh:443, blocking https://tests.peter.sh manually via the 'Add' button does block the site as expected. Note also this is not an issue on mobile because sites cannot be added manually to the block/allow list on mobile. --------------- The observed behaviour is arguably logical but very confusing for users who think they have blocked the site but actually they haven't because permission was still granted on the default port. E.g. Issue 807523 ('Notifications for google maps show even though set to blocked')
,
May 18 2018
The way content settings are evaluated is to choose the most specific setting. Foo.com is actually foo.com:*. Foo.com:443 ist more specific, so it overrides the manually added setting. The correct way to fix this as a user is to either switch the existing setting to "blocked" or delete it. Another way to block it correctly is in the Pageinfo bubble of foo.com I'm not sure how we could improve the UI to make it more clear.
,
May 21 2018
The behavior as described would seem pretty broken to me as a user. Adding some people who might have thoughts.
,
May 21 2018
Also +mkwst
,
Jun 30 2018
msramek, could you take a look at this please? |
||||
►
Sign in to add a comment |
||||
Comment 1 by awdf@chromium.org
, May 18 2018