This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Allow a header cookiewhitelist to decide which cookies by third parties are okay to remember

  • 2 replies
  • 2 have this problem
  • 9 views
  • Last reply by cor-el

Tschallacka
Tschallacka
more options

So i'm a web developer, and cookie laws are getting tighter and tighter because of tracking cookies.

I propose a header a web server can serve that defines whitelisted cookies

cookie_accept: php_session, __utma, __utmz, _ga, _gid

So when I request https://www.foo.bar/baz.html and it has this header and I decide to incorporate 3rd party plugins into baz.html like a facebook button, pinterest button, google maps, YouTube video, that those 3rd party requests done from baz.html will not get sent the cookies the browser has for those domains if the name is not in the whitelist and will not store cookies if the name is in the whitelist.

This way I as a website operator can control what I allow on MY website, instead of being dependent on the whims and cookie law compliance of popular 3rd party websites.

But that requires the support of webbrowsers to obey such a header. Could such a header be made up by the wonderful team behind firefox and perhaps proposed the the w3c to serve as a standard?

So i'm a web developer, and cookie laws are getting tighter and tighter because of tracking cookies. I propose a header a web server can serve that defines whitelisted cookies cookie_accept: php_session, __utma, __utmz, _ga, _gid So when I request https://www.foo.bar/baz.html and it has this header and I decide to incorporate 3rd party plugins into baz.html like a facebook button, pinterest button, google maps, YouTube video, that those 3rd party requests done from baz.html will not get sent the cookies the browser has for those domains if the name is not in the whitelist and will not store cookies if the name is in the whitelist. This way I as a website operator can control what I allow on MY website, instead of being dependent on the whims and cookie law compliance of popular 3rd party websites. But that requires the support of webbrowsers to obey such a header. Could such a header be made up by the wonderful team behind firefox and perhaps proposed the the w3c to serve as a standard?

All Replies (2)

WestEnd
WestEnd
more options

Cookie controls comes from the site and isn't something FF can control or stop. You should contact the site sending the cookies for their support and response to your question.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

See also the Storage Inspector.