#7265: Only display Canvas message for first parties; simply log third parties
-------------------------------------------------------------+--------------
Reporter: mikeperry | Owner:
mikeperry
Type: enhancement | Status:
needs_review
Priority: major | Milestone:
Component: Firefox Patch Issues | Version:
Keywords: tbb-fingerprinting, tbb-bounty, MikePerry201307 | Parent:
Points: | Actualpoints:
-------------------------------------------------------------+--------------
Comment(by mcs):
Replying to [comment:8 gk]:
> http://getfoxyproxy.org/
> http://foundation.zurb.com/
>
> But I am still not sure what exactly is causing the prompts in these
cases. On the FoxyProxy page that is probably due to Modernizr which
checks browser features. But even there a cursory glimpse at the source
code did not convince me that this is not a false positive. I don't have a
clue why the prompt is shown on foundation.zurb.com yet.
It looks like both of those sites use a JS framework named Foundation or a
close relative (see http://foundation.zurb.com/). That framework uses a
canvas to render some text and then uses toDataURL() to grab an image of
it... so this is not a false positive.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7265#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
