Page MenuHomePhabricator

TBB warns about canvas privacy when visiting whonix blog
Closed, ResolvedPublic

Description

TBB gives a privacy warning concerning canvas. Is this an addon we're using? What triggers the warning? TBB bug?

Details

Impact
Normal

Event Timeline

Patrick changed Impact from Needs Triage to Normal.Jun 3 2017, 1:44 PM
Patrick edited projects, added website; removed tb-default-browser.
Patrick added a subscriber: fortasse.
Patrick triaged this task as Normal priority.

From the console log:
Blocked http://kkkkkkkkkk63ava6.onion/blog/ in page http://kkkkkkkkkk63ava6.onion/blog/ from extracting canvas data. http://kkkkkkkkkk63ava6.onion/blog/:51.
Line 51 is related to Wordpress' emoji-rendering code, which is done with the HTML5 canvas.

Following the advice outlined on http://www.denisbouquet.com/remove-wordpress-emoji-code/, this prompt no longer appears.

Of course, we no longer have the Wordpress emojis, but that may be a good thing depending on how you feel about them :)

Patrick closed this task as Resolved.
Patrick assigned this task to fortasse.

Great!