To summarize the analysis and the plan forward, we have identified a series of fixes and improvements to various parts of the stack:
Oxide: the ubuntu-specific provider code or related logic could filter out obvious bogus values returned by the location-service which do not meet the maximumAge filter Location-service: the service API could be extended to support a maximumAge filter parameter Location-service: in the absence of a maximumAge parameter, the accuracy could be reduced depending on the cached location age; that would help app decide whether to ask for a better location if needed. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu. https://bugs.launchpad.net/bugs/1551686 Title: browser leaks old location data to web pages Status in Oxide: In Progress Status in webapps-sprint: New Status in location-service package in Ubuntu: New Status in webbrowser-app package in Ubuntu: Invalid Bug description: visit a web page that requests your current location, for example http ://where-am-i.net it prompts to get permission to share the current location, hit allow and it will probably show where you were a few hours ago as the GPS will have a cached location. Refreshing won't update the location, only applications that subscribe to updates cause the GPS to get a new location. The problem here is that I authorised the web page to know where I am now. I am OK with giving my current position to the web page requesting it. I *didn't* authorise it to know where I was yesterday or this morning, and I might have reasons to not want it to know where my house is, even though I am fine with it knowing where I am right now. The web browser app should not reveal GPS locations that are older than the decision to allow location to be shared with the page. To manage notifications about this bug go to: https://bugs.launchpad.net/oxide/+bug/1551686/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
