Opened 5 weeks ago

Last modified 5 weeks ago

#32423 new defect

Attempts to use location services silently fail with no user feedback as to why

Reported by: pospeselr Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: TorBrowserTeam201910
Cc: tbb-team Actual Points:
Parent ID: Points: 1
Reviewer: Sponsor:

Description

Clicking 'Try It' on this page ( https://www.w3schools.com/html/html5_geolocation.asp ) should result in the location services permission prompt, but instead nothing seems to happen.

Currently, Tor Browser completely disables location services via the geo.enabled preference. However, there is no way through the about:preferences UI to enable location preferences for users who want it.

The Settings - Location Permissions dialog (via about:preferences#privacy -> Permissions -> Location Settings) has a checkbox to "Block new requests asking to access your location". Given Tor Browser's current behavior, we would expect that to be checked, but it is unchecked and toggling does not affect the behavior surrounding location services.

We should look into what that checkbox is actually doing, and possibly tie it to the geo.enabled pref, or possibly revert the pref to true and use the settings this checkbox controls instead.

The end result is that users should be able to enable location services without delving into about:config

Child Tickets

Change History (2)

comment:1 Changed 5 weeks ago by Thorin

That would be permissions.default.geo where 0=always ask (default), 1=allow, 2=block.

Update:
With the geo API enabled and permissions set to block by default, you still get no indication that location was blocked at all: I would have expected the "blocked location" icon to be shown in the urlbar. You can of course click the padlock/keys icon etc and worm your way to the per site permissions panel

The approach in https://bugzilla.mozilla.org/show_bug.cgi?id=1372069 (FF56) was to auto deny the same as if you had clicked deny (maybe this then shows the icon?) - but that was reversed in https://bugzilla.mozilla.org/show_bug.cgi?id=1441295 (FF62).

I'll check what happens in ESR60 with RFP and get back to you (update: no icon shown in the urlbar), otherwise personally, I think this is a UX bug for upstream

Last edited 5 weeks ago by Thorin (previous) (diff)

comment:2 Changed 5 weeks ago by Thorin

FYI: here's a site that you can use for other permission tests as well as location: https://permission.site/ - it's designed for chromium but seems to work with FF/TB

Note: See TracTickets for help on using tickets.