#26605: investigate window.requestIdleCallback() for possible timing leaks
-------------------------------------+-------------------------------------
Reporter: mcs | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor | Version:
Browser | Keywords: tbb-fingerprinting-
Severity: Normal | time-highres, ff60-esr,
| TorBrowserTeam201807
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
-------------------------------------+-------------------------------------
The `window.requestIdleCallback()` API is available as of Firefox 55. We
should determine whether it may be used to learn too much about the
performance of the user's computer/device, or if there are other timing
leaks we want to avoid. See:
https://bugzilla.mozilla.org/show_bug.cgi?id=1314959
https://developer.mozilla.org/en-US/docs/Web/API/Background_Tasks_API
If necessary, we can disable this feature by setting
`dom.requestIdleCallback.enabled` to `false`.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26605>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
