firefox-devtools / firefox-devtools/profiler

In "QuotaManager IO" thread, the names of most the websites are still present even after sanitizing the profile. This effectively means that anyone can look at the profile and see what all websites I have visited

Open
#5,976 0 comments 0 reactions 0 assignees View on GitHub
markers privacy
Dominant language
TypeScript
Stars
1.5k
Forks
491
Avg merge
3d 46m
Merged PRs (30d)
27

Description

Unsanitized profile: https://share.firefox.dev/4txSs9b
Sanitized profile: https://share.firefox.dev/3QMzblV

Notice that in the sanitizzed version, the pathnames are removed, but teh name of the db/wal/whatever files are still present. These db/wal/whatever files have the same name as the website.
So effectively, if I share a sanitized profile, anyone can see which all pages I visit.

This seems bad.

┆Issue is synchronized with this [Jira Task](https://mozilla-hub.atlassian.net/browse/FP-1268)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.