Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

为提升您的使用体验,本站正在维护,部分功能暂时无法使用。如果本站文章无法解决您的问题,您想要向社区提问的话,请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问,我们的支持社区将会很快回复您的疑问。

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Site Circumventing Firefox Privacy Settings

  • 5 个回答
  • 1 人有此问题
  • 14 次查看
  • 最后回复者为 Oo0Bailey0oO

more options

The site FindTheBest.com appears to be bypassing Firefox's privacy settings, changing it to always allow cookies despite being set to block all cookies.

I've tested this several times and I've verified on other sites that the privacy settings are still being adhered to. I'm not sure how they can change the browser setting like that though.

In my last test, I deleted their cookie, removed the cookie exception, set a new exception to always block, blocked all new cookies, closed the page and re-opened it. Still changing it to allow as a new exception.

Is this possible? How can I control it?

The site FindTheBest.com appears to be bypassing Firefox's privacy settings, changing it to always allow cookies despite being set to block all cookies. I've tested this several times and I've verified on other sites that the privacy settings are still being adhered to. I'm not sure how they can change the browser setting like that though. In my last test, I deleted their cookie, removed the cookie exception, set a new exception to always block, blocked all new cookies, closed the page and re-opened it. Still changing it to allow as a new exception. Is this possible? How can I control it?

所有回复 (5)

more options

Are you blocking cookies from findthebest.com or www.findthebest.com ?

You always need to block cookies from the top domain to be sure to block items from sub domains.

more options

Yes, to clarify above, when I'm blocking the site I'm using www.findthebest.com either automatically by "ask me every time" cookie control pop-ups or manually by typing it into the cookie exception window.

Maybe you can test the site as well and then I can tell if it's specific to me or possibly universal.

Thanks

more options

I see cookies from findthebest.com, so if you only block cookies from the domain with the www. prefix then those aren't blocked.

See this thread for a similar issue with Facebook and cookies and sub domains.

more options

But how is it circumventing Privacy setting of "Ask Me Every Time"? The pop-up never comes up, it just sets itself to always allow. Also, even the www. exception is involuntarily flipped to always allow.

I've just tested it again. Under Page Info when on their site, I set it to block cookies, then I refreshed. When I checked it again, it stayed as block this time.

Then I attempted to click "Default" the area went grey and the box stayed unchecked. I clicked it again and the box checked. After refreshing the page again though, no dialog box came up for Default and "block" was still selected under Page Info.

In effect, the same behaviour as always allow but with block now which suggests something is wrong with Firefox for this specific site and not malicious intent on the site itself.

I tried to reproduce this on this very mozilla page, but it behaves as normal/expected, as every other site has so far too.

more options

I forgot to add, this behaviour occurs under safe mode too.