** Changed in: location-service (Ubuntu)
Importance: Undecided => High
** Changed in: oxide
Status: In Progress => Invalid
** Changed in: webapps-sprint
Importance: Undecided => Critical
** Changed in: webapps-sprint
Importance: Critical => High
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu.
https://bugs.launchpad.net/bugs/1551686
Title:
browser leaks old location data to web pages
Status in Oxide:
Invalid
Status in webapps-sprint:
In Progress
Status in location-service package in Ubuntu:
In Progress
Status in webbrowser-app package in Ubuntu:
Invalid
Bug description:
visit a web page that requests your current location, for example http
://where-am-i.net it prompts to get permission to share the current
location, hit allow and it will probably show where you were a few
hours ago as the GPS will have a cached location. Refreshing won't
update the location, only applications that subscribe to updates cause
the GPS to get a new location.
The problem here is that I authorised the web page to know where I am
now. I am OK with giving my current position to the web page
requesting it. I *didn't* authorise it to know where I was yesterday
or this morning, and I might have reasons to not want it to know where
my house is, even though I am fine with it knowing where I am right
now.
The web browser app should not reveal GPS locations that are older
than the decision to allow location to be shared with the page.
To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1551686/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
