Open Bug 1190043 Opened 9 years ago Updated 2 years ago

dom.enable_user_timing preference is not honored

Categories

(Core :: DOM: Core & HTML, defect, P5)

Product:
Core
Component:
DOM: Core & HTML
Version:
39 Branch
Platform:
Unspecified
Linux
Type:
defect

Tracking

()

Status:
UNCONFIRMED

People

(Reporter: cyrillus90, Unassigned)

Details

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:39.0) Gecko/20100101 Firefox/39.0
Build ID: 20150605094246

Steps to reproduce:

1) Set dom.enable_user_timing to false.
2) Try to use the User Timing API (e.g. window.performance.now()).


Actual results:

It works - i.e. window performance.now() returns high resolution timestamp.


Expected results:

Failure. Or maybe as an alternate solution it should return non-high resolution timestamp.

High resolution timer could be used for eavesdropping (see whitepaper: http://arxiv.org/pdf/1502.07373v2.pdf), so this is a security issue as well, and Firefox should definitely abide user's choice to disable it.
Feel free to move to the right component if I am wrong
QA Whiteboard: [bugday-20150727]
Component: Untriaged → Build Config
OS: Unspecified → Linux
Component: Build Config → DOM
Product: Firefox → Core
Priority: -- → P5
Component: DOM → DOM: Core & HTML
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.