News for hackers. Stuff that matters.

A comment on Vulnerability allows cross-browser tracking in Chrome, Firefox, Safari, and Tor. Parent comment

Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by Haemm0r on Friday May 14, 2021 @08:17AM (#27153406)
always show the popup, but populate it "later" could work too.
[ Parent | on HN ]
Re:Vulnerability allows cross-browser tracking in Chrome, Fi... by dathinab on Friday May 14, 2021 @08:25PM (#27161108)
Yes I believe the proper fix would be to always behave as if a popup is showing, independent of weather or not it actually shows.

Through it's maybe slightly more complex as you might need to behave as if the user clicked cancel in a way where a attacker can not easily differentiate it from an actual user clicking cancel.

[ Parent | on HN ]