Forum Discussion

HotCakeX's avatar
Feb 02, 2021

[Resolved] Adding cookies to the Allow list makes them bypass the 3rd party cookie blocking !?

When I turn on 3rd party cookie blocking, and add

  • [*.]youtube.com
  • [*.]google.com

to the allow list of cookies

 

 

this causes Google and YouTube cookies to be read and accessed in Reddit and other sites, Even though 3rd party Cookie blocking is enabled.

 

 

 

 

Edge (or Chromium in general, since it happens on Chrome 88 stable too) is confused.

that Allow list is for allowing certain cookies to enter or stay in the browser,

 

the Allow list is Not a 3rd party cookie bypass list.

 

my actual setup and configuration was more complex but I had to do lots of testing to find out why Reddit still detects and asks me to sign into my Google account when 3rd party cookie blocking is enabled!

 

  • BOKER'S Thank you all for your support to my communities shares blesses one love Education
    • Wittycat's avatar
      Wittycat
      Steel Contributor

      Pajenterprises260 yes it's why insider like HotCakeX and me are for, found an unexpected behavior in the software, confirm the bug and report it to the dev like that they can fix it before any blackHat/Tracker/Ads use it for evil thing.

  • Wittycat's avatar
    Wittycat
    Steel Contributor

    i actually have reproduced it on the "stable" channel. i navigate through a website who use paypal (without clicking on any link to paypal) and if i go to edge://settings/siteData, i see there is a third party cookie from paypal.com.

    But in case of youtube and reddit i can't reproduce since i don't connect myself to reddit.

    • HotCakeX's avatar
      HotCakeX
      MVP

      Wittycat 

      So with the help of eddiezato I figured out the correct way to achieve what I was looking for

       

      https://techcommunity.microsoft.com/t5/discussions/dev-channel-update-to-90-0-782-0-is-live/m-p/2114642/highlight/true#M43321

       

      Must disable these toggles

       

       

      and then I added sites I frequently visit to the Allow list, with the checkbox to allow 3rd party cookies of certain websites.

      everything is working as expected now.

       

      I can log into YouTube, which saves Google cookies on my computer, and then I go to Reddit but the site no longer offers me to create an account with Google, because Reddit no longer reads Google cookies on my browser.

      • Wittycat's avatar
        Wittycat
        Steel Contributor
        thanks i will check on that when i get home ^^
    • HotCakeX's avatar
      HotCakeX
      MVP
      Hey, thanks for testing,
      did you add "PayPal.com" to the Allow list prior to going to that website ?

      you don't need to have a reddit account, i don't.
      if you are logged into Google and YouTube, those cookies will be read by reddit website, offering you to create a reddit account using those sites.

      yes the problem is reproducible on Google Chrome stable 88, Edge stable 88 all the way to Edge canary 90.

      • Wittycat's avatar
        Wittycat
        Steel Contributor
        no i don't use paypal (i have a prepaid master card (i add fund on it instantly) so paypal isn't usefull to me
        The only website autorized is the website who have the paypal object on it, if i deny this website the paypal cookie don't appear again (so it must be a thirs party cookie)

Resources