Skip to content

Disable anchor ping attribute #764

@jumde

Description

@jumde

From here: #13 (comment)

Description

This attribute has been known to track users cross domain

Steps to Reproduce

poc.html
<a href="https://www.w3schools.com/html" ping="<address_of_webserver>">Test</a>

  1. Start a web server - python -m SimpleHTTPServer
  2. Open poc.html and click on the link
  3. Check the webserver logs

Actual result:

A request attempt when the link is clicked

Expected result:

No requests

Reproduces how often:

100%

Brave version (about:brave info)

Brave | 0.54.0 Chromium: 69.0.3497.32 (Official Build) dev (64-bit)

Reproducible on current release:

Yes

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions