Opened 3 years ago

Closed 6 weeks ago

#23227 closed task (worksforme)

Automatically deny canvas request and don't show this message

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-fingerprinting
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

github.com/mozilla-mobile/focus-android/projects/2

Above site automatically asked for canvas.
Using latest Tor Browser.

Why there is no option to deny all canvas request and don't show this
in the first place?

Child Tickets

Attachments (1)

Untitled.jpg (37.4 KB) - added by cypherpunks 3 years ago.

Download all attachments as: .zip

Change History (4)

Changed 3 years ago by cypherpunks

Attachment: Untitled.jpg added

comment:1 Changed 3 years ago by cypherpunks

https://tor.stackexchange.com/questions/1891/how-to-remove-disable-always-accept-html5-canvas-image/14835#14835

There must be a way to disable canvas forever without user interaction.
I'm already using HIGH security mode in Tor Button.

comment:2 Changed 3 years ago by gk

Resolving #24237 as duplicate.

Last edited 3 years ago by gk (previous) (diff)

comment:3 Changed 6 weeks ago by Thorin

Priority: Very HighMedium
Resolution: worksforme
Status: newclosed

3 years later ... all upstream

  • canvas is now under the RFP switch
  • privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts was added default true to reduce prompt fatigue
  • a canvas indicator is shown in the urlbar for specific site overrides (in Tor Browser this will be session only)
  • at safest level, JS is disabled, so canvas doesn't even apply

closing as WORKSFORME

Note: See TracTickets for help on using tickets.