firefox-devtools / firefox-devtools/profiler
In "QuotaManager IO" thread, the names of most the websites are still present even after sanitizing the profile. This effectively means that anyone can look at the profile and see what all websites I have visited
Open
markers
privacy
- Dominant language
- TypeScript
- Stars
- 1.5k
- Forks
- 491
- Avg merge
- 3d 46m
- Merged PRs (30d)
- 27
Description
Unsanitized profile: https://share.firefox.dev/4txSs9b
Sanitized profile: https://share.firefox.dev/3QMzblV
Notice that in the sanitizzed version, the pathnames are removed, but teh name of the db/wal/whatever files are still present. These db/wal/whatever files have the same name as the website.
So effectively, if I share a sanitized profile, anyone can see which all pages I visit.
This seems bad.
┆Issue is synchronized with this [Jira Task](https://mozilla-hub.atlassian.net/browse/FP-1268)
Contributor guide
Assessment
This issue has not been assessed yet.