4 ms·
The link above is to a different section of the page, giving the mistaken impression that this is unfettered access to the local file system, which it isn't. Qu
by kibwen 4y ago
The link above is to a different section of the page, giving the mistaken impression that this is unfettered access to the local file system, which it isn't. Quoting the appropriate section further down the page:
The origin private file system (OPFS) is a storage endpoint private to the origin of the page, providing optional access to a special kind of file that is highly optimized for performance, for example, by offering in-place and exclusive write access to a file's content.
Storing data in the OPFS is similar to storing data in any other browser-provided storage mechanism that's private to the origin of the page (for example the IndexedDB API). This means that files in the OPFS differ from files selected using a picker in the following ways:
- Permission prompts are not required to access files in the OPFS.
- Clearing data for the site deletes the OPFS.
- The OPFS is subject to browser quota restrictions.
- hedora 4y ago> Permission prompts are not required to access files in the OPFS. Surely, it prompts at some point. Otherwise this is an unblockable cookie mechanism. Presumably there is some way to disable it, right?
- mhoad 4y agoHow is it different from window.localStorage.setItem('user-id', 'user123'); I look at it like so: Local Storage: Key Value IndexedDB: Structured Document Database OPFS: BYO File Format But all operate under the same restrictions and set of considerations.
- kibwen 4y agoCookies already don't prompt, so I'm not sure that's the best comparison. In addition, while cookies can be created by one origin and read by another origin (a.k.a. "third-party cookies", which Firefox has been trying to deprecate for a while now), this API is private to each origin, making it useless for cross-site tracking. As for disabling this, I assume these are the appropriate pages in the docs: https://support.mozilla.org/en-US/kb/storage https://support.mozilla.org/en-US/kb/storage https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox https://support.mozilla.org/en-US/kb/block-websites-storing-... .
- hedora 4y agoSo, there’s no “disable for all sites” or (better) “clear on close” button, like there is for cookies. Great.
- jasonlotito 4y ago> So, there’s no “disable for all sites” or (better) “clear on close” button, like there is for cookies. There is. Settings > Privacy & Security > Cookies and Site Data. Select "Delete cookies and site data when Firefox is closed." > Great It is great.