question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

navigator.userAgent not farbled properly in dynamic iframes

See original GitHub issue

See third-party test page here: https://arkenfox.github.io/TZP/tzp.html

With “aggressively block fingerprinting” setting, spaces are pseudo-randomly added to navigator.userAgent. Some dynamically created iframes are producing a hash that matches the unfarbled navigator.userAgent, suggesting that farbling is not happening in those iframes.

Issue Analytics

  • State:closed
  • Created 10 months ago
  • Comments:7 (4 by maintainers)

github_iconTop GitHub Comments

2reactions
pilgrim-bravecommented, Dec 6, 2022

STR:

Control:

  • visit https://arkenfox.github.io/TZP/tzp.html#useragent
  • verify Shields are up (default) and set to “block fingerprinting” (default)
  • note value next to hash field in table
  • next to “iframes” click “show” to reveal 7 more hash values
  • all 8 hash values should match

Test:

  • change Shields to “aggressively block fingerprinting”
  • note value next to hash field in table
  • next to “iframes” click “show” to reveal 7 more hash values
  • all 8 hash values should match
0reactions
MadhaviSeelamcommented, Dec 7, 2022

Verification PASSED using

Brave | 1.48.32 Chromium: 108.0.5359.94 (Official Build) nightly (64-bit)
-- | --
Revision | 713576b895246504ccc6b92c2fb8ce2d60194074-refs/branch-heads/5359_71@{#3}
OS | Windows 11 Version 21H2 (Build 22000.1219)

Verified using STR from https://github.com/brave/brave-browser/issues/26700#issuecomment-1339834224 and ensured that the hashes under https://arkenfox.github.io/TZP/tzp.html#useragent are matching once FP is set as Strict/Aggressive as per the following:

FP set as Standard

hash iframes
image image

FP set as Aggressive

hash iframes
image image
Read more comments on GitHub >

github_iconTop Results From Across the Web

Load iframe content with different user agent - Stack Overflow
First of all, you must create a function to change the user agent string: function setUserAgent(window, userAgent) { if (window.navigator.
Read more >
500260 - IFRAME content gets switched/garbled when using ...
- I am not sure if the renderer (after detecting that it deals with a dynamic frame) can positively *identify* the frame to...
Read more >
Migrate to User-Agent Client Hints - web.dev
The first step, regardless of whether or not you will be taking any action, is to understand where and why you are using...
Read more >
brave-core: browser/farbling ...
213 // Farbling level: default. 214 // navigator.userAgent may be farbled, but the farbling is not. 215 // domain-specific.
Read more >
Integrate tracking protection #3 - brave/brave-browser - GitHub
navigator.userAgent not farbled properly in dynamic iframes #26700. Closed. Manual test run on Linux x64 for 1.46.x - Release #3 #27206.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found