[tbb-bugs] #15640 [Tor Browser]: Place Canvas MediaStream behind site permission

[Tor Bug Tracker & Wiki]

#15640: Place Canvas MediaStream behind site permission
------------------------------------------+--------------------------
 Reporter:  mikeperry                     |          Owner:  tbb-team
     Type:  defect                        |         Status:  new
 Priority:  normal                        |      Milestone:
Component:  Tor Browser                   |        Version:
 Keywords:  ff45-esr, tbb-fingerprinting  |  Actual Points:
Parent ID:                                |         Points:
------------------------------------------+--------------------------
 The Canvas is specified as a potential MediaStream source, to allow live
 video capture of  Canvas data by Javascript. This is a fingerprinting
 risk, and should be placed behind our Canvas site permission.

 https://dvcs.w3.org/hg/audio/raw-file/tip/streams/StreamProcessing.html
 #canvas-recording

 Apparently support for this has not yet been added to Firefox, but they
 are currently working on landing it. Adding the ff45-esr tag accordingly.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15640>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online