[tor-bugs] #26605 [Applications/Tor Browser]: investigate window.requestIdleCallback() for possible timing leaks
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Jul 2 14:59:47 UTC 2018
#26605: investigate window.requestIdleCallback() for possible timing leaks
-------------------------------------+-------------------------------------
Reporter: mcs | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor | Version:
Browser | Keywords: tbb-fingerprinting-
Severity: Normal | time-highres, ff60-esr,
| TorBrowserTeam201807
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
-------------------------------------+-------------------------------------
The `window.requestIdleCallback()` API is available as of Firefox 55. We
should determine whether it may be used to learn too much about the
performance of the user's computer/device, or if there are other timing
leaks we want to avoid. See:
https://bugzilla.mozilla.org/show_bug.cgi?id=1314959
https://developer.mozilla.org/en-US/docs/Web/API/Background_Tasks_API
If necessary, we can disable this feature by setting
`dom.requestIdleCallback.enabled` to `false`.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26605>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list