-
Notifications
You must be signed in to change notification settings - Fork 2.8k
Closed
brave/brave-core
#11638Labels
OS/AndroidFixes related to Android browser functionalityFixes related to Android browser functionalityOS/DesktopQA Pass - Android ARMQA Pass - Android TabQA Pass-macOSQA/Test-Plan-SpecifiedQA/Yesfeature/shields/fingerprintThe fingerprinting (aka: "device recognition") protection provided in ShieldsThe fingerprinting (aka: "device recognition") protection provided in Shieldsprivacyprivacy/chromium-redqueenWork to remove or improve privacy-harming "features" added in Chromium.Work to remove or improve privacy-harming "features" added in Chromium.privacy/trackingPreventing sites from tracking users across the webPreventing sites from tracking users across the webrelease-notes/include
Milestone
Description
Chromium allows sites to learn about local network conditions by querying navigator.connection
. This is privacy harming information. It can be used by fingerprinters, as well as by more determined attackers to potentially learn about user traveling patterns (including when the user is at home or not).
Ideal behavior here would be for the below to both be true in all shields configurations:
navigator.connection === undefined
"connection" in window.navigator === false
An ideal implementation would also include a brave://flags option (default off) that advanced users could use to re-enable the API. The flag description should have text mentioning that the functionality risks their privacy.
Metadata
Metadata
Labels
OS/AndroidFixes related to Android browser functionalityFixes related to Android browser functionalityOS/DesktopQA Pass - Android ARMQA Pass - Android TabQA Pass-macOSQA/Test-Plan-SpecifiedQA/Yesfeature/shields/fingerprintThe fingerprinting (aka: "device recognition") protection provided in ShieldsThe fingerprinting (aka: "device recognition") protection provided in Shieldsprivacyprivacy/chromium-redqueenWork to remove or improve privacy-harming "features" added in Chromium.Work to remove or improve privacy-harming "features" added in Chromium.privacy/trackingPreventing sites from tracking users across the webPreventing sites from tracking users across the webrelease-notes/include