website-evidence-collector icon indicating copy to clipboard operation
website-evidence-collector copied to clipboard

Published 20 hours ago • verified publisher icon EU-EDPS

Incomplete evidence

Open noleakseu opened this issue 3 years ago • 1 comments

WEC does not collect favicon requests. Could be an issue of heedless mode: https://github.com/cyrus-and/chrome-har-capturer/issues/90#issuecomment-787446869

noleakseu avatar Mar 03 '21 06:03 noleakseu

This is indeed a nice catch! I am happy that some users check carefully check the evidence and report it here.

So how should this be fixed? The best way would be: upstream in Chromium.

As this will certainly take a lot of time (if even considered), there exist a number of work arounds. We could:

  1. document that favicon requests for headless browsing is out of scope of the evidence collection
  2. add custom code

I am rather in favor of option 1, because it is more simple, does not slow down scans and I do not expect many privacy problems arising from the loading of favicons. Of course, this may change in the future.

ghost avatar Mar 03 '21 08:03 ghost