[tbb-bugs] #13023 [Tor Browser]: Disable the Gamepad API

Mon Sep 1 21:30:30 UTC 2014

#13023: Disable the Gamepad API
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  tbb-
     Type:  defect                               |  team
 Priority:  critical                             |         Status:  new
Component:  Tor Browser                          |      Milestone:
 Keywords:  tbb-pref, ff31-esr, tbb-             |        Version:
  fingerprinting, TorBrowserTeam201409           |  Actual Points:
Parent ID:                                       |         Points:
-------------------------------------------------+-------------------------
 The GamePad API allows JS to silently query all attached videogame
 controlers and extract their USB device IDs and other vendor info strings,
 without user interaction:
 https://developer.mozilla.org/en-US/docs/Web/Guide/API/Gamepad

 We should just disable this API via its pref for now.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13023>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online