Canvasblocker: Add protection for APIs in web workers

Created on 11 May 2020  路  5Comments  路  Source: kkapsner/CanvasBlocker

APIs used in web workers (Worker, SharedWorker, ServiceWorker) are not protected by CanvasBlocker. They should be protected!

At the moment only the navigator API can be used in web workers but when https://bugzilla.mozilla.org/show_bug.cgi?id=1390089 lands offscreen canvas can be used to extract the canvas fingerprint.

Firefox bug enhancement

Most helpful comment

I triaged the Firefox bug report for you, hopefully it gets picked up. 馃憤馃徎

All 5 comments

I do not see a good way to do that at the moment. Therefore I created https://bugzilla.mozilla.org/show_bug.cgi?id=1636977 - maybe Firefox will implement something useful.

I triaged the Firefox bug report for you, hopefully it gets picked up. 馃憤馃徎

Thanks.

Thanks for the link. The protection approach is a little bit different so I think I have to do it different. But I may have some ideas of how to do something myself...

Was this page helpful?
0 / 5 - 0 ratings