1472808 - For privacy.resistFingerprinting, spoof Keyboard Layout according to content locale

Status: NEW

(Core :: DOM: UI Events & Focus Handling, enhancement, P3)

Description

[Arthur Edelstein [:arthur]]

Bug 1222285 introduced keyboard layout spoofing for privacy.resistFingerprinting = true. Some KeyboardEvent properties are spoofed to make it look as though the user has an en-US keyboard, while not altering the physical keyboard layout.

We would like to extend this functionality to spoof a different keyboard layout, depending on the declared (or inferred) locale of the web page. So, for example, scripts in German content pages should spoof a German keyboard.

Comment 1

[Gary Chen [:xeonchen]]

This looks like a huge bug if we want to contain all different (~200) locales.
Probably we can choose some most frequently used locales to implement first?

Comment 2

[Georg Koppen]

We had some discussion about this bug in the Tor uplift session yesterday. There were some concerns raised:

1) What does this additional complexity exactly gain us compared to what we have right now?
2) What do we do with countries like Brazil where essentially no one is using a pt-BR keyboard layout? What other countries does this affect?
3) What happens for users that are frequently surfing and interacting on websites with different content locales?
4) How can we get (more) data about 2) and 3)?