[tor-bugs] #15646 [Tor Browser]: KeyboardEvent may allow fingerprinting of keyboard layout (was: KeyboardEvent.code may allow fingerprinting of keyboard layout)

[Tor Bug Tracker & Wiki]

#15646: KeyboardEvent may allow fingerprinting of keyboard layout
-----------------------------+------------------------------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  major        |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  ff38-esr, tbb-fingerprinting
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+------------------------------------------
Changes (by gk):

 * cc: gk (added)
 * keywords:   => ff38-esr, tbb-fingerprinting
 * priority:  minor => major


Old description:

> https://developer.mozilla.org/en-
> US/docs/Web/API/KeyboardEvent/code#Code_values_on_Windows_%28When_scancode_is_available%29
> says:
>
> The KeyboardEvent.code property represents a physical key, that is value
> not changed neither by the modifier state, nor by keyboard layout.

New description:

 E.g. https://developer.mozilla.org/en-
 US/docs/Web/API/KeyboardEvent/code#Code_values_on_Windows_%28When_scancode_is_available%29
 says:

 The KeyboardEvent.code property represents a physical key, that is value
 not changed neither by the modifier state, nor by keyboard layout.

--

Comment:

 This landed in Firefox 32. We need to take care of it before we switch to
 ESR 38.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15646#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online