Forum Discussion
HotCakeX
Feb 02, 2021MVP
[Resolved] Adding cookies to the Allow list makes them bypass the 3rd party cookie blocking !?
When I turn on 3rd party cookie blocking, and add
- [*.]youtube.com
- [*.]google.com
to the allow list of cookies
this causes Google and YouTube cookies to be read and accessed in Reddit and other sites, Even though 3rd party Cookie blocking is enabled.
Edge (or Chromium in general, since it happens on Chrome 88 stable too) is confused.
that Allow list is for allowing certain cookies to enter or stay in the browser,
the Allow list is Not a 3rd party cookie bypass list.
my actual setup and configuration was more complex but I had to do lots of testing to find out why Reddit still detects and asks me to sign into my Google account when 3rd party cookie blocking is enabled!
- Pajenterprises260Copper ContributorBOKER'S Thank you all for your support to my communities shares blesses one love Education
- WittycatSteel Contributor
Pajenterprises260 yes it's why insider like HotCakeX and me are for, found an unexpected behavior in the software, confirm the bug and report it to the dev like that they can fix it before any blackHat/Tracker/Ads use it for evil thing.
Pajenterprises260 wrote:
BOKER'S Thank you all for your support to my communities shares blesses one love Educationyou're welcome!
- WittycatSteel Contributor
i actually have reproduced it on the "stable" channel. i navigate through a website who use paypal (without clicking on any link to paypal) and if i go to edge://settings/siteData, i see there is a third party cookie from paypal.com.
But in case of youtube and reddit i can't reproduce since i don't connect myself to reddit.So with the help of eddiezato I figured out the correct way to achieve what I was looking for
Must disable these toggles
and then I added sites I frequently visit to the Allow list, with the checkbox to allow 3rd party cookies of certain websites.
everything is working as expected now.
I can log into YouTube, which saves Google cookies on my computer, and then I go to Reddit but the site no longer offers me to create an account with Google, because Reddit no longer reads Google cookies on my browser.
- WittycatSteel Contributorthanks i will check on that when i get home ^^
- Hey, thanks for testing,
did you add "PayPal.com" to the Allow list prior to going to that website ?
you don't need to have a reddit account, i don't.
if you are logged into Google and YouTube, those cookies will be read by reddit website, offering you to create a reddit account using those sites.
yes the problem is reproducible on Google Chrome stable 88, Edge stable 88 all the way to Edge canary 90.- WittycatSteel Contributorno i don't use paypal (i have a prepaid master card (i add fund on it instantly) so paypal isn't usefull to me
The only website autorized is the website who have the paypal object on it, if i deny this website the paypal cookie don't appear again (so it must be a thirs party cookie)