Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Using getPhotoSettings and takePhoto allows for cross site communication #285

Open
pes10k opened this issue Jul 16, 2021 · 0 comments
Open

Using getPhotoSettings and takePhoto allows for cross site communication #285

pes10k opened this issue Jul 16, 2021 · 0 comments
Labels
privacy-needs-resolution Issue the Privacy Group has raised and looks for a response on.

Comments

@pes10k
Copy link

pes10k commented Jul 16, 2021 •
edited
Loading

(this issue is from the review I did as part of PING's HR review)

It seems like you could communicate cross frames easily using takePhoto to set PhotoSettings in one frame, and then reading those settings back in another frame with getPhotoSettings. This weakens the privacy goals generally being pursed through site isolation, and would allow for cross site tracking.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
privacy-needs-resolution Issue the Privacy Group has raised and looks for a response on.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@pes10k