Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Advance content-scope-scripts forward #453

Merged
merged 1 commit into from
Mar 9, 2022
Merged

Conversation

jonathanKingston
Copy link
Collaborator

@jonathanKingston jonathanKingston commented Mar 1, 2022

Task/Issue URL: https://app.asana.com/0/569473074191537/1201894298881763/f
Tech Design URL:
CC:

Description:

Draft commit to test: https://app.asana.com/0/569473074191537/1201894298881763/f and duckduckgo/BrowserServicesKit#73

Steps to test this PR:

  1. Open https://good.third-party.site/security/js-leaks.html
  2. Click Safari
  3. Click check

Check for globals that look defined by us (the test gets outdated per Safari release: but previously we had 'init' and 'contentScopeFeatures' leaked)

Testing checklist:

  • Test with Release configuration

Internal references:

Software Engineering Expectations
Technical Design Template
When ready for review, remember to post the PR in MM

@bstandaert-ddg
Copy link

bstandaert-ddg commented Mar 2, 2022

I thought I commented on this earlier, but it looks like my comment didn't save somehow. This fixes the Doodle issue for me (or at least it did yesterday; the page isn't loading for me at the moment, but I think that's unrelated). Looking at the test link, there's still two other things being leaked:

  1. window.FB - made a task for this: https://app.asana.com/0/1199178362774117/1201903875992988/f
  2. navigator.duckduckgo.isDuckDuckGo - I'm not sure what this is, is this supposed to be exposed to webpages?

duckduckgo/BrowserServicesKit#73 (comment)

@tomasstrba tomasstrba self-requested a review March 9, 2022 13:47
@tomasstrba tomasstrba self-assigned this Mar 9, 2022
Copy link
Contributor

@tomasstrba tomasstrba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 👍 Please see my comment in duckduckgo/BrowserServicesKit#73

@jonathanKingston jonathanKingston merged commit 21445fd into develop Mar 9, 2022
@jonathanKingston jonathanKingston deleted the jkt/advance-css branch March 9, 2022 17:18
samsymons added a commit that referenced this pull request Mar 10, 2022
* develop:
  Advance content scope scripts forwards (#453)
  Animate dashboard resizing (#454)
  Dashboard in background tabs (#458)
  Fix resubmitting search with spaces (#456)
  Use smarter encryption feature from the BSK (#441)
  Use pageZoom instead of magnification when adjusting web view zoom level (#455)
  Version 0.19.2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants