Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement a privacy preserving mode functionality avoiding usage of the persistent browser localStorage #173

Open
evilaliv3 opened this issue Sep 13, 2022 · 0 comments

Comments

@evilaliv3
Copy link

evilaliv3 commented Sep 13, 2022

Hello @moribvndvs,

I would like to propose the implementation of a privacy preserving mode functionality avoiding usage of the localStorage.

While working on GlobaLeaks and using the ng-idle/ng2-idle component i've analyzed the implementation an currently noticed that it always use the localStorage of the browser if available and this make the library not suitable for privacy preserving projects that prefer to not use the localStorage to minimize the forensic traces left on the browser of the user.

As a workaround to use ng-idle and ng2-idle in those kind of project i've currently identified that one can just simply delete the object window.localStorage while initializing the application. This will silently force ng-idle and ng2-idle to use just the AlternativeLocalStorage implementation that you have already implemented as a polyfill.

This can be achieved with a simple line: delete window.localStorage;

With this ticket i'm proposing to extend the configuration possibilities of both ng-idle and ng-idle2 to let the user choose if using the browser localStorage or prefer to always use the virtual implementation based on a temporary dictionary.

Thank you if you could evaluate this that is very important for projects like us (currently we are using ng-idle but soon we plan to be using ng2-idle)

@evilaliv3 evilaliv3 changed the title Implement a privacy preserving mode functionality avoiding usage of the persistent brower localStorage Implement a privacy preserving mode functionality avoiding usage of the persistent browser localStorage Sep 13, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant