Closed Bug 1619747 Opened 5 years ago Closed 5 years ago

Add support for Sec-CH-UA

Categories

(Firefox :: Untriaged, enhancement)

enhancement
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 935216

People

(Reporter: jcthomp, Unassigned)

Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.122 Safari/537.36

Steps to reproduce:

One of the important use cases for the user-agent string is vulnerability filtering (see: https://github.com/WICG/ua-client-hints#vulnerability-filtering). That is, proxy servers are used to verify that users accessing information are not doing so from browsers/devices that are potentially vulnerable to security issues.

While the major version provides some insight, it is not enough. Both the full browser and OS version are required to ensure that that user is indeed running an up-to-date version.

Given the freeze of the UA string, It would be great to have support in FF for Sec-CH-UA to enable the ability to opt-into receiving the full browser and OS version. Or, have some feature that indicates that the version is out-of-date/vulnerable, while preserving the existing UA information.

Status: UNCONFIRMED → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.