[tor-bugs] #12609 [TorBrowserButton]: HTML5 fullscreen API makes TB fingerprintable, disable it!

[Tor Bug Tracker & Wiki]

#12609: HTML5 fullscreen API makes TB fingerprintable, disable it!
----------------------------------+--------------------------------
     Reporter:  cypherpunks       |      Owner:  mikeperry
         Type:  defect            |     Status:  needs_revision
     Priority:  major             |  Milestone:
    Component:  TorBrowserButton  |    Version:
   Resolution:                    |   Keywords:  tbb-fingerprinting
Actual Points:                    |  Parent ID:
       Points:                    |
----------------------------------+--------------------------------

Comment (by mikeperry):

 Personally, I would rather fix the root Firefox bug here to actually
 prompt before making the widget full screen. Disabling full screen for
 everyone is bad UX. In terms of the number of people who will complain
 about either property, I think more will complain if we fully remove their
 ability to watch full screen videos.

 Just about the only thing that would convince me otherwise is if this
 fingerprinting could be done invisibly, without the user becoming aware of
 it via a full screen video suddenly playing.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12609#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online