2 ms·
This is equivalent to saying that nothing dynamic can depend on the position or size of elements. Which means you can't use <picture> or srcset to load differen
by jefftk 7y ago
This is equivalent to saying that nothing dynamic can depend on the position or size of elements. Which means you can't use <picture> or srcset to load different images in different cases, because that can be exploited to leak what size other elements are. You can't use media queries to affect anything that can send requests. There can't be any way to lazy-load images that are way down the page.
From an anti-fingerprinting perspective you do much better to restrict what system fonts are available than to remove all of these valuable and common reactive features.
- oneeyedpigeon 7y ago> This is equivalent to saying that nothing dynamic can depend on the position or size of elements. Unless that dependency is specified in a style sheet language, yes. I think that’s exactly how it should be: the web of 'apps' is fine to break this if it wants, the web of 'content' shouldn’t be concerned with extremely detailed matters of presentation. > From an anti-fingerprinting perspective you do much better to restrict what system fonts are available Agreed; I’m not saying there isn’t lower hanging fruit, I’m just commenting on the one that interested me.
- jefftk 7y agoThe problem is, even if you restrict this to being specified in CSS it can still be used for fingerprinting