Firefox leaks the number of cameras and microphones without the website needing permission
Categories
(Core :: WebRTC: Audio/Video, defect)
Tracking
()
People
(Reporter: bugzilla.mozilla, Unassigned)
Details
Attachments
(4 files)
Shot 2020-06-16 at 18.01.16.png
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0
Steps to reproduce:
- Go to https://broadcast.nvidia.com/feedback/greenscreen?ncid=so-othe-49700&sdk=greenscreen and notice the 'camera' and 'microphone' buttons next to recording. See screenshots for more context.
Firefox Version 79.0a1 (2020-06-16) (64-bit)
OS: MacOS 10.15.5 (19F101)
Actual results:
Firefox gave the website the number of cameras and mics I have on my system WITH NO PERMISSION. This is leakage of sensitive information.
See screenshot of Chrome for comparison
Expected results:
Show no camera and no mics till user grants permission to getUserMedia
This is how it looks on Chrome Version 83.0.4103.97 (Official Build) (64-bit)
|
||
Comment 5•4 years ago
|
||
Bugbug thinks this bug should belong to this component, but please revert this change in case of error.
|
||
Comment 6•4 years ago
|
||
Jib, could you please help me triage this one?
On my Linux system, I see two microphones, but not my camera. On my OS X system, I don't see any devices.
|
||
Updated•4 years ago
|
Description
•