4 ms·

I wish the Safari content blocking API allowed cookies to be blocked. I'd block cookies for 99% of sites I visit, allowing them only for the handful of sites to

by js2 6y ago

I wish the Safari content blocking API allowed cookies to be blocked. I'd block cookies for 99% of sites I visit, allowing them only for the handful of sites to which I login. I'd suggest Safari could even make cookies require getting user permission, the same way location access needs to be granted. "Allow, allow for 24 hours, deny." It could default deny except for sites to which it has a saved password which could default allow.

inetknght 6y ago
> Safari could even make cookies require getting user permission Ode to browsers of the 90s
GeekyBear 6y ago
Safari started blocking third party cookies by default earlier this year. https://www.engadget.com/2020-03-24-safari-blocks-all-third-party-cookies-by-default.html https://www.engadget.com/2020-03-24-safari-blocks-all-third-... Previously, you had to flip a switch in the settings.
- js2 6y ago
  I want to block even first-party cookies. And the third-party cookie logic prevents Fidelity's Full View from working correctly, so I have to disable it to use that feature of their site.
angott 6y ago
It already does that! 1Blocker lets you specify a list of websites for which cookies won't be sent in the request headers. So I suppose the API indeed supports this feature.
- js2 6y ago
  Holy crap, you're right: https://developer.apple.com/documentation/safariservices/creating_a_content_blocker https://developer.apple.com/documentation/safariservices/cre... https://kb.adguard.com/en/general/how-to-create-your-own-ad-filters#cookie-modifier https://kb.adguard.com/en/general/how-to-create-your-own-ad-... (I switched from 1Blocker to Adguard because 1Blocker wasn't working very well for me.)
benhurmarcel 6y ago
The best way of working I found for cookies is to automatically delete them a short period of time after the website is closed. And keep a whitelist for trusted websites you want to stay connected to. It's trivial on desktop using an extension [1], but not yet on iOS. [1] https://github.com/Lusito/forget-me-not https://github.com/Lusito/forget-me-not

by js2 6y ago

inetknght 6y ago

> Safari could even make cookies require getting user permission Ode to browsers of the 90s

GeekyBear 6y ago

Safari started blocking third party cookies by default earlier this year. https://www.engadget.com/2020-03-24-safari-blocks-all-third-party-cookies-by-default.html https://www.engadget.com/2020-03-24-safari-blocks-all-third-... Previously, you had to flip a switch in the settings.

js2 6y ago
I want to block even first-party cookies. And the third-party cookie logic prevents Fidelity's Full View from working correctly, so I have to disable it to use that feature of their site.

angott 6y ago

It already does that! 1Blocker lets you specify a list of websites for which cookies won't be sent in the request headers. So I suppose the API indeed supports this feature.

js2 6y ago
Holy crap, you're right: https://developer.apple.com/documentation/safariservices/creating_a_content_blocker https://developer.apple.com/documentation/safariservices/cre... https://kb.adguard.com/en/general/how-to-create-your-own-ad-filters#cookie-modifier https://kb.adguard.com/en/general/how-to-create-your-own-ad-... (I switched from 1Blocker to Adguard because 1Blocker wasn't working very well for me.)

benhurmarcel 6y ago

The best way of working I found for cookies is to automatically delete them a short period of time after the website is closed. And keep a whitelist for trusted websites you want to stay connected to. It's trivial on desktop using an extension [1], but not yet on iOS. [1] https://github.com/Lusito/forget-me-not https://github.com/Lusito/forget-me-not