1515941 - Make unintentional sending of URLs to webcompat.com less easy to do

Status: RESOLVED WONTFIX

(Web Compatibility :: Tooling & Investigations, enhancement)

Description

[jutah]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:64.0) Gecko/20100101 Firefox/64.0

Steps to reproduce:

When the user touches "Report site issue" in the menu or snackbar, immediately and without asking, Firefox sends the link of the active tab to the webcompat.com website: this can be easily done by mistake on touch screen devices.


Actual results:

A link can (often) contain personal data, especially links to private resources, like pages under login or intranet.


Expected results:

This can be fixed by simply asking something like "Do you really want to report an issue with this page? The full link will be sent to the Web Compatibility site" before leaking the current URL to the reporting endpoint. What do developers think about this?

Comment 1

[Mike Taylor [:miketaylr]]

Attachment: Screen Shot 2019-05-08 at 5.19.03 PM.png

Until the user submits a bug manually, no information about a URL is logged or captured. We give a pretty obvious warning about that just under the submit button, so I'm inclined to WONTFIX here.

Thanks for the report though, I appreciate the suggestion.

Comment 2

[Mike Taylor [:miketaylr]]

Thanks for the bug. Unless the user chooses to submit a report, the URL is not logged or captured in any way.