Closed
Bug 728894
Opened 13 years ago
Closed 12 years ago
[B2G] Don't expose the Firefox patch level (13.X.Y) in the UA string, only show the major version (13.X)
Categories
(Firefox OS Graveyard :: General, defect)
Firefox OS Graveyard
General
Tracking
(blocking-basecamp:-)
RESOLVED
FIXED
blocking-basecamp | - |
People
(Reporter: dao, Unassigned)
References
(Blocks 1 open bug, )
Details
(Keywords: privacy, Whiteboard: fixed by bug 728831)
+++ This bug was initially created as a clone of Bug #728831 +++
Steps to reproduce:
1) Load http://www.delorie.com:81/some/url.txt
Actual results:
The User-Agent header exposes the security patch level as either a minor version number or as an alpha/beta/pre indicator. This data is exposed twice: in the Gecko version and in the application version.
While it is of value to expose this data to e.g. AMO, exposing it to all sites makes the browser more fingerprintable (see https://panopticlick.eff.org/ ) and doesn't serve a purpose more important than user privacy. Point releases don't change functionality beyond security and stability fixes, so sites shouldn't be sniffing the patch level anyway.
Making trunk, alpha and beta builds look like release builds for sniffing purposes reduces sniffing-related failures that waste time when treated as functionality-related regressions by mistake.
Expected results:
Expected the version numbers to show the major version of the most recent Firefox beta that Mozilla has shipped and not to show the security patch level or an alpha/beta/pre indicator.
Additional information:
Internet Explorer doesn't expose the security patch level in its UA string.
Summary: Don't expose the Firefox patch level (13.X.Y) in the UA string, only show the major version (13.X) → [B2G] Don't expose the Firefox patch level (13.X.Y) in the UA string, only show the major version (13.X)
> Point releases don't change functionality beyond security and stability fixes,
> so sites shouldn't be sniffing the patch level anyway.
This is wishful thinking. Point releases fix serious bugs. Do you really need examples?
Updated•12 years ago
|
blocking-basecamp: --- → ?
Comment 4•12 years ago
|
||
If this is not being done in desktop or mobile, doesn't need to block basecamp
blocking-basecamp: ? → -
Reporter | ||
Updated•12 years ago
|
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Whiteboard: fixed by bug 728831
You need to log in
before you can comment on or make changes to this bug.
Description
•