[Webkit-unassigned] [Bug 213306] WIP: we should be able to capture mouse, keyboard, and wheel events to investigate tracking

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=213306

--- Comment #9 from Elena <elucherini at apple.com> ---
(In reply to katherine_cheney from comment #8)
> Comment on attachment 402302 [details]
> Patch
> 
> View in context:
> https://bugs.webkit.org/attachment.cgi?id=402302&action=review
> 
> > Source/WebKit/WebProcess/WebCoreSupport/WebResourceLoadObserver.cpp:417
> > +    WTFLogAlways("Keyboard event with key %s, key identifier %s, code %s, text '%s'", platformKeyboardEvent.key().utf8().data(), platformKeyboardEvent.keyIdentifier().utf8().data(), platformKeyboardEvent.code().utf8().data(), platformKeyboardEvent.text().utf8().data());
> 
> Could logging the text value be a privacy or security issue here? For
> passwords or sensitive data?

Good point. Actually, all the information I am gathering about keyboard events can be potentially sensitive as it can be easily reconnected to the characters entered. So, if anything, I should just log that a key event has happened at a given time.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200619/0aab7bac/attachment-0001.htm>