1
0
mirror of https://github.com/gorhill/uBlock.git synced 2024-07-08 12:57:57 +02:00
uBlock/platform
Raymond Hill 9e4385243c
Web accessible secrets can be used for at most one second
Related issue:
- https://github.com/uBlockOrigin/uBlock-issues/issues/550

Related Chromium issue (I can't access it):
- https://bugs.chromium.org/p/chromium/issues/detail?id=957866

Findings so far: affects browsers based on Chromium 74.
I could not reproduce the issue with either Chromium 73 or
Google Chrome 75.

This commit is a mitigation: to prevent sites from using
uBO's internal WAR secret for tracking purpose. A secret
can be used for at most one second, after which a new secret
is generated.

The original issue related to the implementation of
secret-gated web accessible resources is:
- https://github.com/gorhill/uBlock/issues/2823
2019-04-30 14:36:07 -04:00
..
chromium Web accessible secrets can be used for at most one second 2019-04-30 14:36:07 -04:00
firefox Add unlimitedStorage to Firefox manifest; add timeout to IndexedDB access 2019-03-17 09:45:28 -04:00
opera Set minimum Opera version to 40 (Chromium 53) 2019-01-25 08:41:15 -05:00
safari Compress the icon PNGs with zopflipng (#3458) 2018-04-15 06:30:40 -04:00
thunderbird Experimental Thunderbird 65+ support: experimental 2019-01-20 12:22:40 -05:00
webext Minor generic code review of changes since 1.18.2 2019-02-02 08:09:34 -05:00