| 267645 |
Page can obtain path to Mozilla installation or possibly profile by examining JavaScript exceptions |
P3 |
Boris Zbarsky [:bzbarsky] |
[sg:want] stepping-stone [fingerprinting][fp-triaged][adv-main75-] |
| 461204 |
Boundary delimiter for HTTP file posts is static. That is wrong according to RFC. |
-- |
Tom Ritter [:tjr] |
[sg:low][tor 22919][adv-main74-] |
| 467035 |
<!DOCTYPE> ignores contentaccessible, leaks DTD strings and therefore browser UI locale |
P2 |
Alex Catarineu (Tor Browser dev) |
[sg:low][fingerprinting][fp-triaged][tor 30304][adv-main70-] |
| 527667 |
DOM Storage (localStorage, sessionStorage) data is not cleared when "Clear Recent History" is used with Time range not "Everything" |
P1 |
|
[sg:want][tor][fingerprinting] |
| 572650 |
[meta] Reduce the amount of data and entropy sent out in HTTP requests |
P5 |
|
[fingerprinting][necko-would-take][fp-triaged] |
| 583181 |
Don't reveal navigator.buildID to every site on the web |
P3 |
Chris Peterson [:cpeterson] |
[fingerprinting] |
| 654550 |
Preference to disable video statistics |
-- |
leonard.beck |
[tor] [fingerprinting] |
| 680300 |
Restrict discoverability of protocol handlers [Tor 1623] |
P2 |
Tim Huang[:timhuang] |
[fingerprinting][probing][necko-backlog][tor] |
| 732096 |
Add a preference to prevent local font enumeration |
P3 |
|
[fingerprinting][tor][tor-standalone] |
| 779197 |
Use a protocol not accessible from content |
P3 |
|
[fingerprinting] |
| 811582 |
window JS object provides a large amount of identifiable information |
-- |
|
[fingerprinting][fp-triaged] |
| 903959 |
custom resource://foo/ allows fingerprinting addons |
-- |
|
[fingerprinting] |
| 967895 |
Prompt (w/ Site Permission) before allowing content to extract canvas data (Tor 6253) |
P1 |
Chung-Sheng Fu [:cfu] |
[tor][fingerprinting][fp:m3][ux] |
| 1039069 |
Warn the user that customizing the preferred language list (Accept-Language) can be used for fingerprinting |
P1 |
Chung-Sheng Fu [:cfu] |
[tor][fingerprinting][fp:m3][ux] |
| 1041818 |
take steps to mitigate canvas fingerprinting |
P2 |
|
[fingerprinting][tor][fp-triaged] |
| 1077986 |
offline storage permission setting not working correctly |
-- |
|
[tor][fingerprinting] |
| 1121643 |
Add an option to only expose whitelisted system fonts to avoid fontlist fingerprinting (Tor 13313) |
P3 |
Arthur Edelstein [:arthur] |
[gfx-noted] [tor][fingerprinting] |
| 1216800 |
some chrome code may be incorrectly receiving spoofed devicePixelRatio |
-- |
|
[fingerprinting] |
| 1217238 |
Reduce precision of time exposed by Javascript (Tor 1517) |
P1 |
Jonathan Hao (inactive) [:jhao] |
[fingerprinting][tor][fp:m1] |
| 1217290 |
Add fingerprinting resistance for WebGL (Tor 16005) |
P1 |
Chung-Sheng Fu [:cfu] |
[tor][tor-standalone][fingerprinting][fp:m3] |
| 1222285 |
Keyboard layout is leaked by KeyboardEvent |
P1 |
Tim Huang[:timhuang] |
[tor 15646][tor 17009][tor-standalone][fingerprinting][fp:m3][fp-triaged] |
| 1222924 |
Stop exposing the moz-icon URL scheme to the web |
P3 |
:Gijs (he/him) |
[gfx-noted][fingerprinting][fp:m4][adv-main59-] |
| 1233691 |
Redesign mediaDevices.enumerateDevices() API |
-- |
|
|
| 1290481 |
Implement mitigations for opaque response storage in the DOM cache |
P2 |
Tom Tung [:tt, :ttung] |
[storage-v1][fingerprinting][adv-main57-] |
| 1308340 |
checkbox in about:preferences#privacy for privacy.resistFingerprinting (Tor 20244.1) |
-- |
Arthur Edelstein [:arthur] |
[tor][fingerprinting][fp-backlog][fp-triaged] |
| 1314443 |
Audit the existing disable WebRTC preferences and ensure they work as advertised |
P3 |
Tom Ritter [:tjr] |
[tor][fingerprinting][tor-mobile][fp-triaged] |
| 1314448 |
Create a build target that adds --disable-webrtc to the mozconfig |
P3 |
|
[tor][tor-testing][fingerprinting] |
| 1315203 |
XSHM: Cross Site History Manipulation (information leakage) |
P3 |
|
[fingerprinting][fp-triaged] |
| 1330876 |
use properly contrasting colors if the desktop theme specifies white on black for text colors [tor 6786] |
P1 |
Chung-Sheng Fu [:cfu] |
[fingerprinting] gfx-noted [tor][fp:m2] |
| 1330882 |
When privacy.resistFingerprinting = true, set new windows to rounded dimensions [tor 19459] |
P3 |
|
[fingerprinting][tor][fp-triaged] |
| 1330890 |
Use UTC timezone when privacy.resistFingerprinting = true [tor 16622] |
P1 |
Tom Ritter [:tjr] |
[fingerprinting][tor 16622][fp:m1][fp-triaged] |
| 1330892 |
<isindex> leaks user locale |
P1 |
|
[fingerprinting][tor][fp:m3] |
| 1333641 |
Disable WebSpeech API when privacy.resistFingerprinting is enabled |
P1 |
Tim Huang[:timhuang] |
[tor][fingerprinting][fp:m2] |
| 1333651 |
Spoofing Navigator API when resisting fingerprinting is enabled |
P1 |
Tim Huang[:timhuang] |
[tor][fingerprinting][domsecurity-backlog1][fp:m2] |
| 1333933 |
Disable/spoof fingerprintable features when privacy.resistFingerprinting = true |
P1 |
Arthur Edelstein [:arthur] |
[tor][fingerprinting][fp-backlog][fp-triaged] |
| 1337157 |
privacy.resistFingerprinting should disable WEBGL_debug_renderer_info |
P2 |
Tom Ritter [:tjr] |
gfx-noted, [tor][fingerprinting] |
| 1337161 |
Disable navigator.getGamepads() when privacy.resistFingerprinting = true |
P1 |
Chung-Sheng Fu [:cfu] |
[tor][fingerprinting][fp:m2] |
| 1345322 |
Create the preference privacy.resistFingerprinting in firefox.js |
P1 |
Ethan Tseng [:ethan] |
[fingerprinting][tor][fp:m1] |
| 1354633 |
blank MediaError.message when resisting fingerprinting |
P2 |
Chung-Sheng Fu [:cfu] |
[tor 21792][fingerprinting][fp:m3] |
| 1360039 |
Spoof navigator.hardwareConcurrency = 2 when privacy.resistFingerprinting = true |
P1 |
Chris Peterson [:cpeterson] |
[tor 21675][fingerprinting][fp:m1] |
| 1363508 |
Consider how to do Anti-fingerprinting for Pointer Events |
P1 |
Tim Huang[:timhuang] |
[tor 25794][fingerprinting] |
| 1364261 |
Make UTC Timezone Spoofing optional when privacy.resistfingerprinting = true |
P3 |
|
[tor][fingerprinting-breakage][fp-backlog][fp-triaged] |
| 1367313 |
Add a test case to inform people when someone tries to remove prefs that have fingerprinting concerns |
P1 |
Tim Huang[:timhuang] |
[fingerprinting][tor][fp:m1] [domsecurity-active] |
| 1369319 |
Disable device sensors when 'privacy.resistFingerprinting' is true |
P1 |
Tim Huang[:timhuang] |
[fingerprinting][tor][fp:m2] |
| 1369327 |
Making reader view users uniform when 'privacy.resistFingerprinting' is true |
P1 |
Jonathan Hao (inactive) [:jhao] |
[fingerprinting][tor][fp:m2] |
| 1369328 |
Open popup windows in new tabs when 'privacy.resistFingerprinting' = true |
P1 |
Tim Huang[:timhuang] |
[fingerprinting][tor][fp:m2][domsecurity-active] |
| 1369330 |
Make javascript use English locale when 'privacy.resistFingerprinting' is true |
P1 |
|
[fingerprinting][tor][fp:m2] |
| 1372069 |
Neutralize the threat of fingerprinting of geolocation API when 'privacy.resistFingerprinting' is true |
P1 |
Tim Huang[:timhuang] |
[fingerprinting][tor][fp:m2] |
| 1372072 |
Neutralize the threat of fingerprinting of network information API when 'privacy.resistFingerprinting' is true |
P1 |
Tim Huang[:timhuang] |
[fingerprinting][tor][fp:m2] |
| 1372073 |
Neutralize the threat of fingerprinting of media devices API when 'privacy.resistFingerprinting' is true |
P3 |
Chung-Sheng Fu [:cfu] |
[fingerprinting][tor][fp:m3] |
| 1382499 |
Touch API leaks absolute screen coordinates |
P3 |
Chung-Sheng Fu [:cfu] |
[tor 10286][fingerprinting][fp:m3] |
| 1382533 |
When resisting fingerprinting, don't expose local IP Addresses via mDNS |
P2 |
Chung-Sheng Fu [:cfu] |
[tor 22165][fingerprinting][fp:m3] |
| 1382545 |
Animation API exposes high-res time stamp |
P2 |
Tim Huang[:timhuang] |
[tor 16337][fingerprinting][fp:m3] |
| 1383495 |
Spoofing Navigator API platform as Win64 when resisting fingerprinting is enabled |
P3 |
Ethan Tseng [:ethan] |
[tor][fingerprinting][fp:m3][domsecurity-active] |
| 1390465 |
disable or limit WebVTT with privacy.resistFingerprinting |
P3 |
Fatih Kilic [:fkilic] |
[tor][fingerprinting][fp-triaged] |
| 1392844 |
Ensure that Stylo respects privacy.resistFingerprinting |
P3 |
|
[tor][fingerprinting][stylo][fp-backlog] |
| 1393283 |
privacy.resistFingerprinting should change the user agent to 52, not 50 |
P2 |
Ethan Tseng [:ethan] |
[tor][fingerprinting][domsecurity-active] |
| 1393662 |
Making IsResistFingerprintingEnabled() checks in nsRFPService::ReduceTimePrecisionAs* inline and changing the name of nsRFPService::ReduceTimePrecisionAs* into MaybeReduceTimePrecisionAs* |
P2 |
Tom Ritter [:tjr] |
[fingerprinting][tor][domsecurity-backlog][fp:m4] |
| 1394735 |
Enabling privacy.resistFingerprinting causes jank in jquery scrolling |
-- |
|
[fingerprinting][fp-triaged] |
| 1396468 |
Spoof navigator.oscpu as 'Windows NT 6.1; Win64; x64' when resisting fingerprinting is enabled |
P2 |
Ethan Tseng [:ethan] |
[tor][fingerprinting][domsecurity-active] |
| 1397994 |
CSS line-height reveals platform |
P5 |
Pier Angelo Vendrame |
[tor 23104][tor 23701][tor 29563][fingerprinting][fp-triaged] |
| 1397996 |
scrollbar thickness reveals platform |
P2 |
|
[tor][fingerprinting][fp-triaged][tor 22137] |
| 1399279 |
initial viewport too small for fullscreen WebApps with privacy.resistFingerprinting enabled |
P5 |
|
[fingerprinting][fp-triaged][tor-mobile] |
| 1400582 |
Deleting all history still leaves some traces that can be used to precisely track individual users. |
P3 |
|
[tor][fingerprinting] |
| 1401493 |
Perform Fingerprint Comparison of Tor Browser and Firefox |
P3 |
|
[tor][fingerprinting][fp-triaged] |
| 1403099 |
game in http://www.best.io/paper-io has very bad performance due to anti-fingerprinting setting (needs higher resolution timer) |
P5 |
|
[domsecurity-backlog][fingerprinting][fp-triaged] |
| 1403747 |
When privacy.resistFingerprinting is true, warn users not to maximize their window |
P5 |
|
[tor][fingerprinting][fp-triaged] |
| 1404608 |
Do not lie about Operating System when privacy.resistFingerprinting is true |
P3 |
Tim Huang[:timhuang] |
[domsecurity-backlog3][fingerprinting-breakage] |
| 1405810 |
Setting privacy.resistFingerprinting=true breaks cmd keyboard shortcuts for Google Docs on OSX |
P1 |
|
[domsecurity-backlog1][tor][fingerprinting-breakage][fp-triaged] |
| 1405842 |
Devices returned from enumerateDevices have the same deviceId across originattributes |
-- |
|
[usercontextId][tor] |
| 1407366 |
When privacy.resistFingerprinting=true, dynamically round content dimensions |
P2 |
Tom Ritter [:tjr] |
[fingerprinting][fp-triaged][tor 14429] |
| 1408702 |
Resist fingerprinting causes scrollbar glitch in Firefox 58 |
P2 |
Emilio Cobos Álvarez (:emilio) |
[tor][fingerprinting-breakage] |
| 1409809 |
Constantly remind people about privacy.resistFingerprinting |
-- |
|
[fingerprinting-breakage] |
| 1409973 |
Make Date.toLocaleDateString and Intl.DateTimeFormat anti-fingerprintable |
P1 |
Tom Ritter [:tjr] |
[fingerprinting][tor][fp-triaged] |
| 1409974 |
KeyboardEvent.location could be used as a user behavior fingerprinting vector. |
P3 |
|
[fingerprinting][fp-triaged] |
| 1414311 |
New window size is different than expected after changing screen dpi (with privacy.resistFingerprinting pref enabled) |
P2 |
|
[fingerprinting][fp-triaged][tor 30970] |
| 1418537 |
Bad window height set when bookmarks toolbar is open with resistfingerprinting option |
P3 |
|
[fingerprinting][fp-triaged][tor 27845] |
| 1420234 |
The privacy.resistFingerprinting flag interferes with the JS Date object |
-- |
|
[fingerprinting] |
| 1422482 |
OS username disclosure using downloads manager |
P3 |
|
[fingerprinting][tor] |
| 1422862 |
Make OffscreenCanvas respect Canvas Permission Prompt so you don't always get a placeholder |
P3 |
Fatih Kilic [:fkilic] |
[fingerprinting][gfx-noted][fp-triaged][fpp:m8] |
| 1422890 |
Add additional Canvas Fingerprinting Tests |
P3 |
|
[fingerprinting][gfx-noted][fp-triaged] |
| 1425130 |
Sensor API exposes a High-Res timestamp |
P3 |
|
[fingerprinting][domsecurity-backlog1][fp-triaged] |
| 1428331 |
HiDPI and privacy.resistFingerprinting |
-- |
|
[fingerprinting][fp-triaged] |
| 1432506 |
Implement the Canvas Permission Prompt on Fennec |
P3 |
|
[fingerprinting][fp-triaged] |
| 1433815 |
Ensure EnableOrientationChangeListener respects privacy.resistFingerprinting |
P3 |
|
[tor-mobile][fingerprinting][fp-triaged] |
| 1436226 |
Hardcode VP8/VP9 algorithm choice when resisting fingerprinting |
P2 |
Fatih Kilic [:fkilic] |
[tor 22548] [fingerprinting][fp-triaged] |
| 1437266 |
Navigating back on youtube sometimes fails and restarts the current video with resistFingerprinting enabled |
P3 |
|
[fingerprinting][domsecurity-backlog1][fp-triaged] |
| 1437349 |
Detect if user install certain software with external protocol |
-- |
|
[fingerprinting] |
| 1439784 |
Fix the KeyboardEvent mochitests |
P3 |
|
[tor][fingerprinting][fp-triaged] |
| 1442863 |
Smooth scrolling implementations perform badly with resistFingerprinting's reduced timer precision |
P3 |
|
[fingerprinting][fp-triaged] |
| 1446472 |
privacy.resistFingerprinting is true blocks QR code (canvas) on web.whatsapp.com without any notice |
P2 |
Tim Huang[:timhuang] |
[fingerprinting] [gfx-noted][fp-triaged] |
| 1447592 |
Don't reset privacy.spoof_english when privacy.resistFingerprinting is flipped back to false |
P2 |
Tom Ritter [:tjr] |
[fingerprinting-breakage] |
| 1448046 |
Can we remove the window.Components shim? |
P3 |
Tom Ritter [:tjr] |
|
| 1450401 |
mozFullScreen leaks exact screen resolution |
P3 |
|
[fingerprinting][fp-triaged] |
| 1450561 |
Resist screen elements dimensions fingerprinting |
P5 |
|
[tor][fingerprinting][domsecurity-backlog1][fp-triaged] |
| 1456378 |
privacy.resistFingerprinting breaks image cropping in Expensify |
P2 |
|
[domsecurity-backlog1][fingerprinting][fp-triaged] |
| 1459089 |
Even when resistFingerprinting is enabled, FF leaks the OS locale in the accept headers |
-- |
Igor Oliveira |
[fingerprinting] |
| 1460145 |
privacy.resistfingerprinting breaks the square selection on the HOT Tasking Manager |
P2 |
Tim Huang[:timhuang] |
[domsecurity-backlog1][fingerprinting][fp-triaged] |
| 1461454 |
Support Resist Fingerprinting in canPlayType and Media Capabilities APIs |
P2 |
Tom Ritter [:tjr] |
[tor 13543][fingerprinting][fp-triaged] |
| 1462115 |
privacy.resistfingerprinting affects the timezone displayed in native file picker dialogs |
P3 |
|
[tor][fingerprinting][domsecurity-backlog1][fp-triaged] |
| 1466025 |
enforce DNT header when privacy.resistFingerprinting=true |
P3 |
|
[fingerprinting][domsecurity-backlog1][fp-triaged] |
| 1468957 |
privacy.resistFingerprinting set to true breaks https://www.google.com/streetview/ |
P2 |
Tim Huang[:timhuang] |
[domsecurity-backlog1][fingerprinting][fp-triaged] |
| 1470828 |
privacy.resistFingerprinting breaks some shortcut keys |
P2 |
|
[fingerprinting][fp-triaged] |
| 1472808 |
For privacy.resistFingerprinting, spoof Keyboard Layout according to content locale |
P3 |
|
[tor][fingerprinting][fp-triaged] |
| 1478158 |
Guard prefers-reduced-motion by Resist Fingerprinting pref |
P3 |
Hiroyuki Ikezoe (:hiro) |
[fingerprinting] |
| 1485249 |
WebGL extensions should be disabled when private.resistFingerprinting is enabled |
P2 |
|
[tor 6370][gfx-noted][fingerprinting][fp-triaged] |
| 1485258 |
When privacy.spoof_english is true, don't reveal locale by charset fallback |
P3 |
|
[tor 20025][fingerprinting][fp-triaged] |
| 1485266 |
When privacy.resistFingerprinting = true, use stand-ins for native colors |
P2 |
Gary Chen [:xeonchen] |
[tor][gfx-noted][fingerprinting][fp-triaged] |
| 1485268 |
When privacy.resistFingerprinting = true, Reader mode shouldn't parse on load |
-- |
|
[tor] |
| 1485280 |
Prevent fingerprinting by SpeechRecognition |
P3 |
|
[tor][fingerprinting][fp-triaged] |
| 1486258 |
Regression tests to check that new Intl APIs respect privacy.spoof_english |
P2 |
Gary Chen [:xeonchen] |
[tor 26611][fingerprinting][fp-triaged] |
| 1490728 |
Improve discoverability/explanation of RFP |
P3 |
|
[tor][fingerprinting][domsecurity-backlog1][fp-triaged] |
| 1492587 |
Ensure the date picker does not leak user locale when "privacy.spoof_english" == 2 |
P2 |
Gary Chen [:xeonchen] |
[tor 21787][fingerprinting][fp-triaged] |
| 1492766 |
Fingerprinting protection for pointerEvent.pointerid |
P2 |
Tim Huang[:timhuang] |
[fingerprinting][fp-triaged] |
| 1492775 |
Consider how to do fingerprinting resistance for pointer events for mobile |
P3 |
|
[fingerprinting][fp-triaged] |
| 1507280 |
Ensure the reporting URI respects Resist Fingerprinting wrt locale |
P3 |
Fatih Kilic [:fkilic] |
[fingerprinting][fp-triaged][domsecurity-backlog] |
| 1507879 |
Investigate getClientRects for fingerprinting |
P3 |
|
[tor 29564][fingerprinting][fp-triaged] |
| 1509829 |
privacy.resistFingerprinting: UA header, upstream Tor 26146 |
P3 |
Tom Ritter [:tjr] |
[tor][fingerprinting][domsecurity-backlog1][fp-triaged] |
| 1511434 |
privacy.resistFingerprinting: Change spoofed OS version to Windows 10 and macOS 10.14 |
P2 |
Chris Peterson [:cpeterson] |
[tor][fingerprinting][domsecurity-active][fp-triaged] |
| 1511763 |
privacy.resistFingerprinting: Fix calculation of spoofed ESR version for ESR >= 68.0 |
P2 |
Chris Peterson [:cpeterson] |
[domsecurity-active][fp-triaged] |
| 1515001 |
Debug build crashes with `privacy.spoof_english` set |
P1 |
Tom Ritter [:tjr] |
[tor 28875][fp-triaged] |
| 1518839 |
In RFP: Only Spoof the OS in the User Agent; and do not lie in the HTTP Header |
-- |
Tom Ritter [:tjr] |
[tor 26146][fingerprinting] |
| 1519122 |
In RFP Mode, spoof the modifier state "Meta" in OSX into a "Ctrl" state in keyboard events. |
P2 |
|
[tor][fingerprinting] |
| 1529391 |
Don't spoof version number in User Agent with privacy.resistFingerprinting enabled |
P3 |
|
[fingerprinting][domsecurity-backlog] |
| 1535761 |
[meta] Remove native theming for content |
P3 |
|
[fingerprinting][overhead:noted][fp-triaged] [not-a-fission-bug] |
| 1538130 |
privacy.resistFingerprinting should not create windows with rounded dimensions when letterboxing is enabled |
P5 |
Kestrel |
[fingerprinting][tor] |
| 1539503 |
Ensure CSS device-pixel-ratio (and related) and imgset/srcset obeys Fingerprinting Resistance |
-- |
|
[fingerprinting][tor] |
| 1542676 |
Round subpixel accuracy of window properties to integers when resistfingerprinting is enabled |
P3 |
|
[tor 26607][fingerprinting] |
| 1560574 |
ftp:// on Windows can be used to leak the system time zone (Tor 30800) |
P2 |
Gary Chen [:xeonchen] |
[fingerprinting][tor 30800] [necko-triaged] |
| 1560816 |
screen size under privacy.resistFingerprinting should return nearest closest common resolution instead of exact window dimensions |
P3 |
|
[domsecurity-backlog3] |
| 1561322 |
UI locale is detectable by button width |
-- |
Alex Catarineu (Tor Browser dev) |
[tor 24056] |
| 1564422 |
Change `outputLatency` and `getOutputTimestamp` when `resistFingerPrinting` is enabled |
P2 |
Paul Adenot (:padenot) |
|
| 1577243 |
Unconditionally clamp the requestAnimationFrame timestamp (and clamp/jitter it in RFP mode) |
-- |
Tom Ritter [:tjr] |
|
| 1581537 |
Browser UI locale is leaked in several ways |
P3 |
Alex Catarineu (Tor Browser dev) |
[tor 30683][fingerprinting] |
| 1586657 |
Dialog for spoofing the locale in resist-fingerprinting-mode contains non-localized buttons |
P3 |
|
[tor 31980] |
| 1595823 |
Fix the AudioContext's sample-rate if privacy.resistFingerprinting is enabled |
P3 |
Paul Adenot (:padenot) |
[fingerprinting] |
| 1601040 |
Add UI for modifying resistFingerprinting prefs when privacy.resistFingerprinting is enabled |
-- |
morgan (Tor Project) |
[tor 32325][fingerprinting] |
| 1607027 |
css @media device-pixel-ratio and RFP |
-- |
|
|
| 1607316 |
Implement separate fingerprinting resistance treatment of @media interaction features for desktop and android |
-- |
Tom Ritter [:tjr] |
[fingerprinting][tor 32886] |
| 1615419 |
Panopticlick says browser has a unique fingerprint even with privacy.resistFingerprinting = true and Content Blocking: Strict |
-- |
|
|
| 1615483 |
hide VR devices when privacy.resistFingerprinting = true |
-- |
|
[fingerprinting] |
| 1621433 |
In RFP mode, turn the all-white canvas into a fully random 'poison pill' |
P2 |
Tom Ritter [:tjr] |
[fingerprinting][domsecurity-active] |
| 1621988 |
Some Google Docs Shortcuts still don't work under Resist Fingerprinting |
P3 |
|
[tor][fingerprinting][domsecurity-backlog1] |
| 1625771 |
privacy.resistFingerprinting: Fix calculation of spoofed ESR version (affecting releases >=76) |
-- |
|
|
| 1628373 |
Lie better about desktop platform when privacy.resistFingerprinting is set to true |
-- |
|
|
| 1635011 |
resistFingerprinting: Bump spoofed OS versions to macOS 10.15 and Android 9 |
P3 |
Chris Peterson [:cpeterson] |
[domsecurity-active] |
| 1640449 |
Privacy and security features should prevent localhost and local network WebSocket abuse |
P3 |
|
[fingerprinting][necko-triaged] |
| 1666160 |
Users enable `privacy.resistFingerprinting` and then are surprised when it causes problems |
P3 |
Tom Ritter [:tjr] |
[domsecurity-backlog1] |
| 1670199 |
RFP + font visibility = 1: entropy improvements |
-- |
|
|
| 1672093 |
css @media RFP + window/screen subpixel entropy |
P3 |
|
|
| 1673237 |
ignore svg.disabled=false in about pages |
-- |
sanketh |
[tor 27002] |
| 1677733 |
Bookmarks toolbar for new tabs changes screen resolution for new window when privacy.resistFingerprinting is turned on |
P3 |
|
[sng] |
| 1680365 |
RFP userAgent/header on Android doesn't follow Fenix naming convention |
P3 |
Chris Peterson [:cpeterson] |
[domsecurity-backlog1] |
| 1690038 |
Scrollbar is enabled and disabled based on a setting in macOS system preferences |
P2 |
|
[fingerprinting][tor 22632] |
| 1693861 |
Collect Telemetry for how many users have enabled RFP |
P2 |
Tom Ritter [:tjr] |
[domsecurity-active] |
| 1708593 |
Enhance resist fingerprinting: Disable web audio (API) by default when privacy.resistFingerprinting is enabled |
-- |
|
|
| 1709330 |
audit PDF.js for RFP and dFPI |
P5 |
|
[pdfjs-integration] |
| 1711179 |
resistFingerprinting: Bump spoofed Android OS version to 10 |
P3 |
Chris Peterson [:cpeterson] |
[domsecurity-active] |
| 1745715 |
Bundled fonts should have Base visibility even when they are also system-wide installed |
P3 |
Pier Angelo Vendrame |
|
| 1746668 |
Use web exposed locales instead of regional locales where appropriate |
-- |
Pier Angelo Vendrame |
|
| 1758520 |
Disable WebGPU when RFP is enabled |
-- |
|
|
| 1762390 |
Should Gecko_MediaFeatures_MatchesPlatform account for ResistFingerprinting? |
-- |
|
|
| 1772711 |
privacy.resistFingerprinting caps fps to 60 |
P3 |
|
|
| 1781172 |
report real world system font set when enable privacy.resistFingerprinting |
-- |
|
|
| 1781277 |
Do not base storage estimate on user's disk when RFP is enabled |
-- |
Fatih Kilic [:fkilic] |
|
| 1787790 |
getComputedStyle reports a wrong family for system fonts under certain conditions |
-- |
Pier Angelo Vendrame |
[fingerprinting] |
| 1818894 |
RFP: harden network information protection |
-- |
|
[fingerprinting] |
| 1823580 |
Act as though intl.regional_prefs.use_os_locales is false when RFP is enabled |
-- |
|
[domsecurity-backlog] |
| 1825378 |
RFP offscreen canvas allows extension override |
-- |
|
|
| 1827576 |
RFP Math sin/cos/tan spoofing missing for asm.js |
P2 |
Tom Schuster (MoCo) |
|
| 1832598 |
Smooth scrolls are disabled if the user prefers-reduced-motion regardless of fingerprint resistance |
-- |
Dan Robertson (:dlrobertson) |
|
| 1832845 |
Remove the pref `autoDeclineNoUserInputCanvasPrompts` |
-- |
Fatih Kilic [:fkilic] |
|
| 1871789 |
RFPTarget PointerEvents leaks mozPressure + mozInputSource |
-- |
Fatih Kilic [:fkilic] |
|
| 1876636 |
With privacy.resistFingerprinting track.label & track.getSettings().deviceId differ from enumerateDevices() |
P2 |
Jan-Ivar Bruaroey [:jib] (needinfo? me) |
|
| 1876810 |
With privacy.resistFingerprinting, "☑ Remember this decision" forgetting which camera and microphone was shared is confusing |
P3 |
|
|
| 1880108 |
Placeholders on the datetime widget ignore spoof English |
-- |
Pier Angelo Vendrame |
|
| 1885258 |
Remove the IsHidden Exemption for Font Allowlist |
-- |
Tom Ritter [:tjr] |
|
| 1891690 |
EXSLT leaks timezones also when RFP is enabled |
-- |
Fatih Kilic [:fkilic] |
|
| 1899736 |
Can not use 2nd webcam at webcamtests.com with privacy.resistFingerprinting enabled |
-- |
Fatih Kilic [:fkilic] |
|
| 1900648 |
XSLT error messages can leak browser UI language |
-- |
Pier Angelo Vendrame |
[tor 42288][fingerprinting] |
| 1909736 |
RFP: hide textDecoration's underline computedStyle on links |
-- |
|
|
| 1914839 |
Port resist fingerprinting logic from MediaCapabilities decode side to the encode side |
-- |
Fatih Kilic [:fkilic] |
|
| 1924087 |
SVG Switch Element leaks language even with spoof language |
P3 |
Fatih Kilic [:fkilic] |
|
| 1944211 |
RFPTarget PointerEvents mozPressure not compat |
-- |
Fatih Kilic [:fkilic] |
|
| 1947439 |
RFP new window size is off because of roundings on partial values |
P3 |
|
|
| 1948457 |
Window rounding fingerprinting protection no longer works with vertical tabs enabled, all windows created maximized |
P2 |
|
[fidefe-sidebar] |
| 1954170 |
PreXULSkeletonUI doesn't trigger RoundWindowSize RFP Target |
P3 |
|
|
| 1957254 |
RFP: provide [more plausible] hardwareConcurrency per OS |
-- |
|
|