4 ms·

This is why I keep uMatrix around still https://i.imgur.com/9MYqLvj.png https://i.imgur.com/9MYqLvj.png I can quickly disable XHR to confirm websites don't do

This is why I keep uMatrix around still https://i.imgur.com/9MYqLvj.png https://i.imgur.com/9MYqLvj.png I can quickly disable XHR to confirm websites don't do anything server-side when I don't expect them to.

BHSPitMonkey 2y ago
You'd really need to block fetch(), websockets, WebRTC, all external images/stylesheets/scripts added to the DOM later, and service workers (to prevent the upload from just being deferred). It's not easy to make sure a web page can't phone home.
- KTibow 2y ago
  Throttling inside of Devtools should do all of those.
- tyingq 2y ago
  Well, and writing cookies which would upload at a later visit. And probably a dozen other paths.