RequestPolicy/requestpolicy — Issue #101: Automatically Expire Temporary Permissions
Author: jsamuel
Created: 2011-12-22 04:00:48+00:00
State: open
Labels: extension

It seems temporary permissions are only revoked when manually requested by the user, selectively deleted by the user, exiting private browsing (presumed from code), or ending the browser session.

This can result in quasi-permanent "Temporary" permissions, depending on the length of the browsing session -- weeks or longer is not uncommon. There should be a limit to "Temporary" permissions.

Selective deletion seems the only option to persist recent temporary permissions and expunge old permissions; however, this is not viable, particularly as the whitelist does not indicate the time when the permission was granted.

Max duration seems the most sensible solution; however, there are other possible inferences for a "temporary" permission. Recommend as a user specifiable opt-in option.