Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add non-normative note about find-in-page details privacy #7229

Merged
merged 5 commits into from
Nov 1, 2021
Merged

Add non-normative note about find-in-page details privacy #7229

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
fbc85e2
Add non-normative note about find-in-page details privacy
josepharhar Oct 15, 2021
b52ec1a
Add sentence
josepharhar Oct 19, 2021
68e8d28
Add INSERT TRACKING
josepharhar Oct 19, 2021
61a0e69
replace XXX with warning
josepharhar Oct 25, 2021
b83f5fe
Add comma, reword last sentence
josepharhar Oct 28, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions source
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -77019,6 +77019,17 @@ body { display:none }
revealing algorithm</span> on <var>node</var>.</p></li>
</ol>

<p class="XXX">When find-in-page auto-expands a <code>details</code> element like this, it will
annevk marked this conversation as resolved.
Show resolved Hide resolved
fire a <code data-x="event-toggle">toggle</code> event. As with the separate <code
data-x="event-scroll">scroll</code> event that find-in-page fires, this event could be used by the
page to discover what the user is typing into the find-in-page dialog. If the page creates a tiny
scrollable area with the current search term and every possible next character the user could type
separated by a gap and observes which one the browser scrolls to, it can add that character to the
search term and update the scrollable area to incrementally build the search term. This attack
could be addressed regardless of whether the <code data-x="event-toggle">toggle</code> event or
annevk marked this conversation as resolved.
Show resolved Hide resolved
the <code data-x="event-scroll">scroll</code> event is used by not acting on every character the
user types into the find-in-page dialog.</p>

<h4>Interaction with selection</h4>

<p>The find-in-page process is invoked in the context of a document, and may have an effect on
Expand Down