mirrors
/
gotosocial
mirror of
1
Fork 0
Code Issues Releases Activity

[chore] Replace blocking Floc with Topics. (#1068) 

Google abandoned Floc in favour of Topics and changed the
necessary permissions policy. Currently, the Floc policy will
block Topics. This change includes switching to the updated
policy to be ahead of Google abandoning recognising the Floc
policy.

Update the function documentation to include the current relevant
documentation.
This commit is contained in:
psa 2022-11-17 14:04:06 +00:00 committed by GitHub
parent 1852175906
commit c1824b034b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
internal/api/security/flocblock.go
View File

@ -21,8 +21,11 @@ package security
import "github.com/gin-gonic/gin"
// FlocBlock is a middleware that prevents google chrome cohort tracking by
// writing the Permissions-Policy header after all other parts of the request have been completed.
// See: https://plausible.io/blog/google-floc
// writing the Permissions-Policy header after all other parts of the request
// have been completed. Floc was replaced by Topics in 2022 and the spec says
// that interest-cohort will also block Topics (as of 2022-Nov).
// See: https://smartframe.io/blog/google-topics-api-everything-you-need-to-know
// See: https://github.com/patcg-individual-drafts/topics
func (m *Module) FlocBlock(c *gin.Context) {
c.Header("Permissions-Policy", "interest-cohort=()")
c.Header("Permissions-Policy", "browsing-topics=()")
}