UI issue with lockdown policies

%3CLINGO-SUB%20id%3D%22lingo-sub-1295271%22%20slang%3D%22en-US%22%3EUI%20issue%20with%20lockdown%20policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1295271%22%20slang%3D%22en-US%22%3E%3CP%3EI%20manage%20browser%20security%20(amongst%20many%20other%20things)%20at%20a%20company%20with%208000%20workstations.%26nbsp%3B%20Because%20of%20several%20missing%20Enterprise%20features%2C%20we%20haven't%20rolled%20out%20Edge%20yet.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20enabled%20GPO%20Policies%20to%20block%20as%20many%20features%20as%20possible%20for%20standard%20websites%20(cookies%2C%20popups%2C%20tracking%2C%20location%20etc)%2C%20whilst%20white-listing%20our%20internal%20domain.%26nbsp%3B%20The%20idea%20here%20is%20to%20prevent%20malicious%20sites%20from%20hijacking%20the%20browser%2C%20whilst%20allowing%20all%20internal%20apps%20without%20our%20users%20needing%20to%20accept%20things.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20problem%20here%20is%20that%20by%20default%20all%20of%20these%20restrictions%20are%20shown%20in%20the%20%22View%20Site%20Information%22%20page%2C%20even%20when%20the%20site%20is%20not%20actively%20using%20them.%26nbsp%3B%20This%20is%20a%20big%20UI%20problem%20for%20screens%20with%20a%20standard%20resolution%20like%201366x768%2C%20because%20the%20bottom%20half%20of%20the%20window%20is%20cut%20off%20and%20inaccessible.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20I%20have%20several%20questions%20here%3A%3C%2FP%3E%3CUL%3E%3CLI%3Ewhy%20are%20all%20of%20the%20policies%20shown%2C%20even%20if%20they%20are%20not%20in%20use%20by%20the%20page%3F%3C%2FLI%3E%3CLI%3Ecan%20we%20add%20an%20expand%2Fcollapse%20button%20to%20this%20list%2C%20if%20it%20contains%20more%20than%20X%20elements%3F%26nbsp%3B%20Ideally%20this%20should%20be%20based%20on%20your%20screen%20resolution%2C%20so%20that%26nbsp%3B1366x768%20shows%202%20items%2C%20where%20as%201600x900%20shows%205%3C%2FLI%3E%3C%2FUL%3E%3CP%3ESee%20the%20below%20screenshot%20as%20case%20in%20point.%26nbsp%3B%20I%20very%20much%20doubt%20this%20forum%20is%20trying%20to%20use%20all%20of%20these%20permissions...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1366x768%20resolution%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%221366-768.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F183337i646E9F43D68C9ED9%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%221366-768.PNG%22%20alt%3D%221366-768.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1600x900%20resolution%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%221600-900.PNG%22%20style%3D%22width%3A%20320px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F183338i6AE2C84ECB22A258%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%221600-900.PNG%22%20alt%3D%221600-900.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1295271%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EUI%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1306328%22%20slang%3D%22en-US%22%3ERe%3A%20UI%20issue%20with%20lockdown%20policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1306328%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F396562%22%20target%3D%22_blank%22%3E%40Tom_Fox%3C%2FA%3E%26nbsp%3BThanks%20for%20reaching%20out%20and%20letting%20us%20know%20about%20this%20UI%20issue.%20We'll%20loop%20the%20Enterprise%20team%20in%20and%20let%20you%20know%20if%20they%20have%20any%20suggestions.%20In%20the%20meantime%2C%20can%20you%20please%20submit%20detailed%20feedback%2C%20diagnostics%2C%20and%20a%20screenshot%20through%20the%20in-browser%20feedback%20if%20you%20haven't%20yet%3F%20It%20really%20helps%20our%20devs.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CI%3EFawkes%20(they%2Fthem)Project%20%26amp%3B%20Community%20Manager%20-%20Microsoft%20Edge%3CI%3E%3C%2FI%3E%3C%2FI%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1308387%22%20slang%3D%22en-US%22%3ERe%3A%20UI%20issue%20with%20lockdown%20policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1308387%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F484598%22%20target%3D%22_blank%22%3E%40fawkes%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EIt's%20not%20possible%20to%20use%20the%20inbuilt%20feedback%20tool%20on%20this%20popup%20menu%20unfortunately%2C%20it%20closes%20when%20you%20press%20the%20Settings%20button.%26nbsp%3B%20The%20hotkey%20for%20the%20feedback%20tool%20doesn't%20work%20either.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20see%20the%20same%20popup%20window%20on%20every%20website%20that%20I%20visit%2C%20including%20those%20I%20am%20certain%20do%20not%20implement%20Flash%2C%20bluetooth%2C%20notifications%20etc...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20this%20confirms%20my%20suspicion%20that%20the%20entire%20content%20policy%20is%20being%20read%20and%20displayed%2C%20and%20not%20showing%20only%20the%20elements%20that%20are%20actively%20being%20blocked%20or%20allowed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I manage browser security (amongst many other things) at a company with 8000 workstations.  Because of several missing Enterprise features, we haven't rolled out Edge yet.

 

I have enabled GPO Policies to block as many features as possible for standard websites (cookies, popups, tracking, location etc), whilst white-listing our internal domain.  The idea here is to prevent malicious sites from hijacking the browser, whilst allowing all internal apps without our users needing to accept things.

 

The problem here is that by default all of these restrictions are shown in the "View Site Information" page, even when the site is not actively using them.  This is a big UI problem for screens with a standard resolution like 1366x768, because the bottom half of the window is cut off and inaccessible.

 

So I have several questions here:

  • why are all of the policies shown, even if they are not in use by the page?
  • can we add an expand/collapse button to this list, if it contains more than X elements?  Ideally this should be based on your screen resolution, so that 1366x768 shows 2 items, where as 1600x900 shows 5

See the below screenshot as case in point.  I very much doubt this forum is trying to use all of these permissions...

 

1366x768 resolution

1366-768.PNG

 

1600x900 resolution

1600-900.PNG

 

2 Replies
Highlighted

@Tom_Fox Thanks for reaching out and letting us know about this UI issue. We'll loop the Enterprise team in and let you know if they have any suggestions. In the meantime, can you please submit detailed feedback, diagnostics, and a screenshot through the in-browser feedback if you haven't yet? It really helps our devs.

 

Fawkes (they/them)
Project & Community Manager - Microsoft Edge

@fawkes 


It's not possible to use the inbuilt feedback tool on this popup menu unfortunately, it closes when you press the Settings button.  The hotkey for the feedback tool doesn't work either.

 

I see the same popup window on every website that I visit, including those I am certain do not implement Flash, bluetooth, notifications etc...

 

So this confirms my suspicion that the entire content policy is being read and displayed, and not showing only the elements that are actively being blocked or allowed.