firefox-devtools / firefox-devtools/profiler

Extension info isn't really stripped when requested from profiles

Open
#2,693 0 comments 0 reactions 0 assignees View on GitHub
privacy profile data
Dominant language
TypeScript
Stars
1.5k
Forks
491
Avg merge
3d 46m
Merged PRs (30d)
27

Description

After capturing a profile and clicking publish, then unchecking the "include extension information" checkbox, I downloaded the profile json and poked around in it. Even though the `meta.extensions` section is removed. by looking through the data in `threads[].stringArray`, you can effectively get a list of extension names and IDs.

For example, I ran the json through a pretty printer, then `grep \"Extension pretty.json | sort -u` prints out exactly the extensions I am running.

I guess that info happens to incidentally be a part of other collected data.

There are also some domains listed related to tabs I had open that could possibly identify sites. In my case, I had a Gmail tab open and `0.client-channel.google.com`, `contacts.google.com`, `mail.google.com` appear.

┆Issue is synchronized with this [Jira Task](https://mozilla-hub.atlassian.net/browse/FP-296)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.