Closed Bug 1448649 Opened 6 years ago Closed 6 years ago

Useragent missing device name therefore breaking resolution detection code

Categories

(Firefox for Android Graveyard :: General, defect)

Firefox 61
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 625238

People

(Reporter: electroteque, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36

Steps to reproduce:

Device name detection from the useragent is required to determine determine device and dpi resolution. 

this is broken because the device name has been removed thinking it is not needed. 


Actual results:

Mozilla/5.0 (Android 7.0; Mobile; rv:59.0) Gecko/59.0 Firefox/59.0


Expected results:

This is the expected result like with Chrome / Samsung Internet browser

Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G950F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/6.4 Chrome/56.0.2924.87 Mobile Safari/537.36
This is intentional. User agents that are sent by clients should not be assumed to be correct. They are simple to spoof.
Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
What mindset are were talking here security ? I don't think for this purpose it cares about spoofing. This has to be a joke right ? It just needs the specific model number as all of them have different dpi. 

Chrome displays the correct information ? 

I will update that project that firefox will be problem with it. And update clients to stop using it. as Firefox on Android firstly won't support a native cardboard display in webvr, or daydream view for that matter.

 The cardboard polyfill fallback is required and obviously its dimensions are incorrect because of this mishmash idea this will somehow keep the browser secure.
See the duped bug comments 10 and 20 among others. Along with https://groups.google.com/forum/#!topic/mozilla.dev.platform/Q9VmyhMzI04
Product: Firefox for Android → Firefox for Android Graveyard
You need to log in before you can comment on or make changes to this bug.