Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Metadata Leak #321

Closed
issuant opened this issue Sep 30, 2024 · 3 comments
Closed

Metadata Leak #321

issuant opened this issue Sep 30, 2024 · 3 comments
Labels
question Further information is requested third-party extension This is related to a third party webextension.

Comments

@issuant
Copy link

issuant commented Sep 30, 2024

In about:config, I just noticed there's data of at least one extension, Metamask, I tested (because of #178) but removed a long time ago when I activate Show only modified preferences. No idea if there is more elsewhere but I see this explicitly in browser.uiCustomization.state. Is this something that can be deleted?

@ruihildt
Copy link
Member

In about:config, I just noticed there's data of at least one extension

Can you be more specific as to what youobserve? What's the key modified and what's the value?

@ruihildt ruihildt added the third-party extension This is related to a third party webextension. label Sep 30, 2024
@issuant
Copy link
Author

issuant commented Oct 1, 2024

Can you be more specific as to what you observe?

In the left column of about:config after selecting the Show only modified preferences checkbox, there is something called browser.uiCustomization.state. The right column value beside it is a bunch of text that contains "webextension_metamask_io-browser-action" twice. I do not have Metamask installed, and haven't for several months.

@ruihildt ruihildt added the question Further information is requested label Oct 1, 2024
@ruihildt
Copy link
Member

ruihildt commented Oct 1, 2024

This is a left-over from the extension install and only indicates the placement of the extension icon while it was installed. There's an existing issue upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1885885

This is not a fingerprint vector.

@ruihildt ruihildt closed this as completed Oct 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested third-party extension This is related to a third party webextension.
Projects
Development

No branches or pull requests

2 participants