Questions tagged [p3p]

The Platform for Privacy Preferences Project, or P3P, is a protocol allowing websites to declare their intended use of information they collect about browsing users.

83 questions
2
votes
1 answer

P3P headers for pure html/css/javascript page

What P3P headers should I set to prevent IE from blocking my cookies if they only read and modified by javascript (not by server) on my web page (wich is shown in iframe)? I've tried the following IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi…
tsds
  • 7,406
  • 7
  • 57
  • 79
2
votes
0 answers

Request cookie not sent in IE11 with AngularJS P3P WithCredentials

I'm writing a web app with Java back end on Tomcat, and AngularJS front end and all works fine in Chrome, Firefox, etc. but NOT IE 11. The problem is that the initial login is returning a "Set-Cookie" but the cookie is NOT included in subsequent…
2
votes
3 answers

P3P set header for IE8 doesn't seem to work

The below P3P setHeader code is present in my CASresponse jsp but doesn't seem to work, response.setHeader("P3P","policyref=\"http://sso.mydomain.net/w3c/p3p.xml\", CP=\"CAO IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\""); Am…
coderman
  • 285
  • 3
  • 7
  • 21
2
votes
2 answers

Where do I need to set my P3P header to bypass IE8 blocking cookies?

I'm including a javascript file on my page that has a Set-Cookie header. However, the cookie is being blocked by IE8. Where do I set my P3P response header to prevent IE8 from blocking the cookie, on the javascript file request or on my web page?
Jones
  • 299
  • 2
  • 4
  • 11
2
votes
1 answer

IE8 and P3P problems again,

Have been browsing across the net, and seems everyone who got into this mess, really slogged to get out of it,... and now my turn! IE, P3P, IFrame and blocked cookies (works until page host page has personal information requested) been reading alot,…
2
votes
1 answer

logging in to umbraco 6.1 backend doesn't work anymore, keep getting errors and redirect back to login.aspx page

after nog using the backend of our umbraco website for a few months I started developing for our website again. As the website was being used by some people, I decided to use a staging environment. So I moved all my files and finally got the…
Daniël Tulp
  • 1,514
  • 2
  • 18
  • 48
2
votes
1 answer

How to have apache only set P3P header on responses?

So we have a foreign site that's pulling in a cookie and login widget from our domestic site. Since the foreign site is .de, but our domestic site is .com it treats our login widget request as a third party cookie. To get around this we're using…
DFresh4130
  • 21
  • 2
1
vote
1 answer

What are the implications of having a missing P3P file?

I sniffed some Outbrain traffic (e.g. on CNN, find the file called "get" under "odb.outbrain.com/utils" in Chrome's network tab), and found this P3P header: P3P:policyref="http://www.outbrain.com/w3c/p3p.xml",CP="NOI NID CURa DEVa TAIa PSAa PSDa…
ripper234
  • 202,011
  • 255
  • 600
  • 878
1
vote
2 answers

Eternal reloading page with Internet Explorer

I've got a problem with my FB apps with Internet Explorer 7. I'm using this piece of code, provided by FB some time ago : $auth_url = "http://www.facebook.com/dialog/oauth?client_id=" . FACEBOOK_APP_ID . "&redirect_uri=" .…
thomaus
  • 5,780
  • 8
  • 42
  • 62
1
vote
1 answer

is p3p response information accessible from javascript?

As I understand, the webserver will send p3p information to the browser, but will the browser then present that data to the javascript engine via some API?
Alexander Bird
  • 33,259
  • 40
  • 118
  • 154
1
vote
1 answer

How to make P3P play nicely with Azure

My co-founder and I are trying to get a P3P compact policy working with Azure so that IE users can log in to our Facebook app which is hosted in a Canvas IFRAME. We've done the work to make the compact policy and have generated all the XML goodness.…
Armchair Bronco
  • 2,297
  • 3
  • 29
  • 43
1
vote
1 answer

P3P issue with IE and iframe

My question is related to the problem outlined in this question. I have set up my p3p fine as far as I know (the p3p validator doesn't return any errors), but I still get blocked cookies. The src of my iframe is an external website, is there…
McC
1
vote
0 answers

P3P Compact Privacy Policy

I'm trying to get our P3P implementation working. We have generated the necessary policies. We have the meta tag with the compact policy CP="some text here...". We turned off cookies on our site, launched the app, and we got an error that states…
1
vote
2 answers

does p3p allows parent frame to read my cookies?

I am trying to understand the technical implications for setting a compact p3p header in my Facebook application. Someone has said to me that setting the p3p header in my site (iframe) will allow Facebook (parent) to read my cookies. I do not…
Nir Levy
  • 4,174
  • 2
  • 29
  • 47
1
vote
1 answer

CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."

i am using guzzle php server client to get the result. in the array I have received the header details but did not return the expected result. is it something related to p3p? where am i doing wrong? how guzzle php client will result the body? …
blitz
  • 21
  • 2
  • 4