[tbb-bugs] #26605 [Applications/Tor Browser]: investigate window.requestIdleCallback() for possible timing leaks

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jul 2 14:59:47 UTC 2018

#26605: investigate window.requestIdleCallback() for possible timing leaks
     Reporter:  mcs                  |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-fingerprinting-
     Severity:  Normal               |  time-highres, ff60-esr,
                                     |  TorBrowserTeam201807
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
 The `window.requestIdleCallback()` API is available as of Firefox 55. We
 should determine whether it may be used to learn too much about the
 performance of the user's computer/device, or if there are other timing
 leaks we want to avoid. See:
 ​ https://bugzilla.mozilla.org/show_bug.cgi?id=1314959https://developer.mozilla.org/en-US/docs/Web/API/Background_Tasks_API

 If necessary, we can disable this feature by setting
 `dom.requestIdleCallback.enabled` to `false`.

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26605>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list