WordPress.org

Make WordPress Core

Changes between Version 15 and Version 16 of Ticket #42428


Ignore:
Timestamp:
06/13/2018 10:51:44 PM (3 years ago)
Author:
peterwilsoncc
Comment:

As a rough start, I have https://jsbin.com/norotob/6/edit?js,output

  • For tests to work, the element needs to be appended to the DOM
  • I've tested both width and height to reduce the risk of chance matches
  • In Font Face Observer there is some code to deal with Safari and widths, I need to check that out

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #42428 – Description

    v15 v16  
    55To work around this, Firefox has recently uplifted a technique from TOR Browser. If you visit a site that tries to do this it’ll pop open a hanger asking for the user’s permission. You can test this by downloading a copy of Firefox Nightly, going to about:config and setting privacy.resistFingerprinting to true. Which brings us on to WordPress…
    66
    7 Unfortunately the default wp-emoji package also uses this technnique, which triggers a browser warning on a large number of sites I visit on a daily basis. While I doubt that WordPress is using this for user tracking, it means that sites that are being nefarious get lost in the Wordpress noise. This is a shame, but also I would imagine that it would be hard for Firefox to turn this on by default given the number of sites out there using Wordpress.
     7Unfortunately the default wp-emoji package also uses this technnique, which triggers a browser warning on a large number of sites I visit on a daily basis. While I doubt that WordPress is using this for user tracking, it means that sites that are being nefarious get lost in the WordPress noise. This is a shame, but also I would imagine that it would be hard for Firefox to turn this on by default given the number of sites out there using Wordpress.
    88
    99What I’d like to suggest is that: