Open Bug 1325874 Opened 7 years ago Updated 2 years ago

Consider seperating page content history for userContextId

Categories

(Core :: DOM: Security, defect, P3)

Product:
Core
Component:
DOM: Security
Version:
52 Branch
Type:
defect

Tracking

()

Tracking Flags:
Tracking Status
firefox57 --- fix-optional

People

(Reporter: jkt, Unassigned)

References

(Depends on 1 open bug, Blocks 1 open bug)

Details

(Whiteboard: [fingerprinting][fp-triaged][domsecurity-backlog2][userContextId]) 

We should consider if we also want to isolate page history for in-content itself.

For example visited links across containers shouldn't leak history information which could be exploted via the various privacy leak techniques.

STR:
1. Visit google.com
2. Search for 'This is a Test'
3. Click the first result
4. Open a 'Personal' tab
5. Visit google.com
6. Search for 'This is a Test'
7. Notice the first result has been visited.
See Also: → 1325884
Priority: -- → P3
Whiteboard: [fingerprinting][domsecurity-backlog2][userContextId]
No longer blocks: uplift_tor_fingerprinting
Whiteboard: [fingerprinting][domsecurity-backlog2][userContextId] → [fingerprinting][fp-triaged][domsecurity-backlog2][userContextId]
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.