Jetpack/Weekly Meeting/2012-07-31: Difference between revisions

Jetpack/Weekly Meeting/2012-07-31 (view source)

3 bytes removed , 31 July 2012

canmove, Confirmed users

737

edits

@@ Line 61: / Line 61: @@
 ==== Use of resource:// URIs can leak information ====
-Jorge: attended Blackhat. There was a session on browser privacy & fingerprinting. Web content can  identify which add-ons are installed by trying to load content from at resource:// urls. For XUL add-ons, we're planning on asking developers to use chrome:// urls not resource:// urls, but SDK add-ons don't have this option. Irakli: we've talked before about having an addon:// protocol for this stuff.
+Jorge: attended Blackhat. There was a session on browser privacy & fingerprinting. Web content can  identify which add-ons are installed by trying to load content from resource:// urls. For XUL add-ons, we're planning on asking developers to use chrome:// urls not resource:// urls, but SDK add-ons don't have this option. Irakli: we've talked before about having an addon:// protocol for this stuff.
 Alex raised a bug to track this: {{bug|779197}}.