Fenix: FNX2-16286 ⁃ [Bug] Receiving notifications from a website I didn't grant access to

Created on 28 May 2020 · 8Comments · Source: mozilla-mobile/fenix

Bug

I started receiving notifications from a random website yesterday. Tapping the notification just opens the browser, nothing else.

I have never allowed notifications from any website on Nightly. Settings > Site permissions > Exceptions lists four sites for me, and all four of them show either "Blocked" or "Ask to allow" for notifications. The most recent notification at least seems to be from phys.org, but that site is not shown in my exceptions at all.

Device information

Android device: Pixel 2 XL
Fenix version:

Nightly 200528 06:00 (Build #21490607)
44.0.20200527130120, b1ddaff6a
GV: 78.0a1-20200525093440
AS: 0.59.0

Notifications engverified ac 🐞 bug

Source

vaindil

All 8 comments

Android Components issue: https://github.com/mozilla-mobile/android-components/issues/7161

TitanNano on 28 May 2020

This might be the root cause for the one @TitanNano linked above: https://github.com/mozilla-mobile/android-components/issues/7164

jonalmeida on 29 May 2020

With Fenix build Nightly 200530 06:01 (Build #21510609) with AC 44.0.20200529205416 decent websites like Twitter are now able to let users unsubscribe from push. But subscriptions which no longer have permission, or never had, still do not obey their notification permission (see https://github.com/mozilla-mobile/android-components/issues/7161 for that). So as a workaround people could be able to get rid of unwanted existing push subscriptions by visiting the site and trying to unsubscribe through their UI.

TitanNano on 30 May 2020

👍1

Thanks for messaging here! I'm going to close this as fixed.

jonalmeida on 30 May 2020

Hi @sv-ohorvath, I know this is closed on Nightly, but could you do verification on the 79.0.0 beta build that is getting built tomorrow EUR time by sebastian? This is a bad enough use case that we want to make sure that it is absolutely not happening.

liuche on 29 Jun 2020

(going to temporarily re-open this just so we can verify)

liuche on 30 Jun 2020

With the described STR (mainly from https://github.com/mozilla-mobile/fenix/issues/11033) I can confirm that the bug is fixed on Beta 79.0.0-beta1. Notification received on an old Nightly and nothing on this beta. Closing back this issue.