1834744 - Split up RealmBehaviors::shouldResistFingerprinting

Status: RESOLVED FIXED

(Core :: Security, task)

Description

[Tom Schuster]

Currently the JS engine just gets one config option for enabling/disabling RFP mode. Instead we should have a realm option for every configurable feature.

Comment 1

[Tom Ritter [:tjr]]

Instead of different realm options, could we possibly give it a uint32/uint64/BitSet with the enabled RFPTargets? Maybe we could add a reserved bit that indicates 'AllTargets', to be used for RFP mode, and then that bit is cleared for FPP and it checks individual targets?

Comment 2

[Tom Schuster]

I don't think that extensibility is really necessary. (We would also need to move RFPTarget to some place that is accessible to the JS engine) I think right now we would only need two options: forceUTCTimezone and forceFdlibm. I doubt that there are going to be many more sources of fingerprinting added to JS. And we do have some other ways of fingerprinting protection we already use anyway that don't need a flag, at least JS::SetReduceMicrosecondTimePrecisionCallback.

Comment 3

[Tom Ritter [:tjr]]

Hm, okay I figured there'd be a half dozen things we'd need, if it's only 2 or 3....

Comment 4

[Tom Schuster]

Attachment: Bug 1834744 - Split up RealmBehaviors::shouldResistFingerprinting in js/src. r?#spidermonkey-reviewers

Comment 5

[Tom Schuster]

Attachment: Bug 1834744 - Introduce and use two RFPTargets for JS options. r?tjr

Depends on D179534

Comment 6

[Tom Schuster]

Tom, please have a look at the question about WokerPrivate::ShouldResistFingerprinting.

Comment 7

[Tom Schuster]

Attachment: Bug 1834744 - Go back to having WorkerPrivate::ShouldResistFingerprinting. r?tjr

Comment 8

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/5a69fb7b90ba
Go back to having WorkerPrivate::ShouldResistFingerprinting. r=tjr
https://hg.mozilla.org/integration/autoland/rev/740c98ec8491
Split up RealmBehaviors::shouldResistFingerprinting in js/src. r=spidermonkey-reviewers,jandem
https://hg.mozilla.org/integration/autoland/rev/655c1ec8a538
Introduce and use two RFPTargets for JS options. r=tjr

Comment 9

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/5a69fb7b90ba
https://hg.mozilla.org/mozilla-central/rev/740c98ec8491
https://hg.mozilla.org/mozilla-central/rev/655c1ec8a538