#60 Consider adding wrappers for APIs that measure texts
Opened by polcak. Modified

So far we treat font enumerating methods out of scope because there are multiple ways to learn installed fonts and it is hard to provide consistent results. One of the advice is to turn on firefox resistFingerprinting which is a good and consistant counter-measure. But it also activates other changes.

If we decide to wrap the font enumeration methods anyway, we need to consider:

  • The fingerprinter can put text into canvas and learn pixel colors,
  • CanvasRenderingContext2D.prototype.measureText
  • https://apireference.aspose.com/html/net/aspose.html.dom.svg/svgtextcontentelement/methods/getcomputedtextlength (https://github.com/polcak/jsrestrictor/issues/163)
  • Element.getClientRects() (https://github.com/polcak/jsrestrictor/issues/92)
  • HTMLElement.getBoundingClientRects(), HTMLElement.offsetHeight, HTMLElement.offsetWidth, see PriVaricator paper, including problem in Chromium-based browsers with prototype chain

There will probably be more use cases.


Metadata