Partition Blob storage

[goodov]

Currently blob are accessible via URLs generated from URL.createObjectURL in a third-party context. We should partition the storage in a way that blobs can't be accessed in 3p context via URL generated in 1p context.

See also https://privacytests.org/ for blob storage partitioning test.

[goodov]

@pes10k if we can create some test page for this, it would be awesome :)

[pes10k]

Sure thing! For you @goodov , i have this: https://dev-pages.brave.software/storage/partitioning.html

[LaurenWags]

@goodov looks like https://privacytests.org/ has 1.37.x listed on main page and https://privacytests.org/nightly.html has 1.40.x on the Nightly page. Since neither of these will allow me to check 1.39.x, I'll use the page from #21746 (comment) for testing.

Any issues with this? Adding QA/Blocked until we confirm 👍🏻

[goodov]

@goodov looks like https://privacytests.org/ has 1.37.x listed on main page and https://privacytests.org/nightly.html has 1.40.x on the Nightly page. Since neither of these will allow me to check 1.39.x, I'll use the page from #21746 (comment) for testing.

Any issues with this? Adding QA/Blocked until we confirm 👍🏻

I don't see how privacytests.org can affect our own testing. We have our testing page and it should work for 1.39.x perfectly fine.

[LaurenWags]

Ah thanks @goodov.

I read

See also https://privacytests.org/ for blob storage partitioning test.

from the description as something we should verify when checking this issue. Seems that's not the case which is great!

[LaurenWags]

Verified with

Brave | 1.39.83 Chromium: 101.0.4951.41 (Official Build) beta (x86_64)
-- | --
Revision | 93c720db8323b3ec10d056025ab95c23a31997c9-refs/branch-heads/4951@{#904}
OS | macOS Version 12.3.1 (Build 21E258)

Executed test from https://dev-pages.brave.software/storage/partitioning.html using above version and confirmed test passed as expected:

Step 1	Step 2

For comparison, ran test from https://dev-pages.brave.software/storage/partitioning.html using 1.38.109 (current Release channel version), and the test did not pass (expected):

Step 1	Step 2

[MadhaviSeelam]

Verification PASSED using

Brave	1.39.84 Chromium: 101.0.4951.41 (Official Build) beta (64-bit)
Revision	93c720db8323b3ec10d056025ab95c23a31997c9-refs/branch-heads/4951@{#904}
OS	Windows 11 Version 21H2 (Build 22000.613)

Executed test from https://dev-pages.brave.software/storage/partitioning.html using above version and confirmed test passed as expected:

Step 1	Step 2

For comparison, ran test from https://dev-pages.brave.software/storage/partitioning.html using 1.38.109 (current Release channel version), and the test did not pass (expected):

Step 1	Step 2

[btlechowski]

Verification passed on

Brave	1.39.100 Chromium: 101.0.4951.61 (Official Build) beta (64-bit)
Revision	3b3633b32c491b4cba5fd7df3c7c0f628547cbcc-refs/branch-heads/4951@{#1189}
OS	Ubuntu 18.04 LTS

Executed test from https://dev-pages.brave.software/storage/partitioning.html using above version and confirmed test passed as expected:

Step 1	Step 2

For comparison, ran test from https://dev-pages.brave.software/storage/partitioning.html using 1.38.109 (current Release channel version), and the test did not pass (expected):

Step 1	Step 2

[kjozwiak]

Verification PASSED on Samsung S10+ running Android 12 using the following build(s):

Brave | 1.39.109 Chromium: 102.0.5005.50 (Official Build) (64-bit)
--- | ---
Revision | f6e2cf8f59ec714bdcff8499991d55898875f287-refs/branch-heads/5005@{#648}
OS | Android 12; Build/SP1A.210812.016

Executed test from https://dev-pages.brave.software/storage/partitioning.html using above version and confirmed test passed as expected:

Step 1	Step 2

For comparison, ran test from https://dev-pages.brave.software/storage/partitioning.html using 1.38.113 Chromium: 101.0.4951.61 (current Release channel version), and the test did not pass (expected):

Step 1	Step 2

---

Verification PASSED on Samsung Galaxy Tablet A running Android 11 using the following build(s):

Brave | 1.39.109 Chromium: 102.0.5005.50 (Official Build) (64-bit)
--- | ---
Revision | f6e2cf8f59ec714bdcff8499991d55898875f287-refs/branch-heads/5005@{#648}
OS | Android 11; Build/RP1A.200720.012

Executed test from https://dev-pages.brave.software/storage/partitioning.html using above version and confirmed test passed as expected:

Step 1	Step 2

For comparison, ran test from https://dev-pages.brave.software/storage/partitioning.html using 1.38.113 Chromium: 101.0.4951.61 (current Release channel version), and the test did not pass (expected):

Step 1	Step 2