Open Bug 1636977 Opened 4 years ago Updated 5 months ago

Add WebExtension API to allow interaction with workers

Categories

(WebExtensions :: General, enhancement)

Product:
WebExtensions
Component:
General
Version:
78 Branch
Type:
enhancement

Tracking

(Not tracked)

People

(Reporter: bugzilla, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0

Steps to reproduce:

An API to inject scripts into web workers (workers, shared workers and service workers) similar to content scripts would be useful. My use case (for CanvasBlocker) is to prevent fingerprinting over scripts that run in workers.
At the moment only the navigator API is affected by this problem and therefore it's not that critical (userAgent spoofing is kind of pointless anyway). BUT if offscreen canvas get enabled/implemented in Firefox (1390089) the main use case for CanvasBlocker (protecting against canvas fingerprinting) is in danger.

Steps to see the issue in CanvasBlocker:

  1. install CanvasBlocker
  2. go to the preferences page
  3. enable the navigation API protection
  4. open the navigator settings
  5. click on "Windows" and "Chrome"
  6. go to https://canvasblocker.kkapsner.de/test/navigatorTest.php

Actual results:

The WebExtension is not able to change the values in the workers.

Expected results:

The WebExtension should have a way to interact with workers.

Status: UNCONFIRMED → NEW
Ever confirmed: true

Any news on this topic?

Waiting on this.

Flags: needinfo?(geeknik)
Flags: needinfo?(geeknik)
Severity: normal → S3

Are there any plans to do something?

Seriously I would also like an update on this.

Flags: needinfo?(wdurand)
Flags: needinfo?(wdurand)
You need to log in before you can comment on or make changes to this bug.