Summary: | Performance API: Implement performance.timeOrigin | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | WebKit | Reporter: | Nicolas <npm> | ||||||
Component: | Platform | Assignee: | Alex Christensen <achristensen> | ||||||
Status: | RESOLVED FIXED | ||||||||
Severity: | Normal | CC: | achristensen, cdumez, esprehn+autocc, ews-watchlist, igrigorik, joepeck, kondapallykalyan, rniwa, sam, simon.fraser, webkit-bug-importer | ||||||
Priority: | P2 | Keywords: | InRadar, W3CTest, WebExposed, WPTImpact | ||||||
Version: | WebKit Nightly Build | ||||||||
Hardware: | Unspecified | ||||||||
OS: | Unspecified | ||||||||
Attachments: |
|
Description
Nicolas
2017-07-26 07:52:45 PDT
Created attachment 430926 [details]
patch
Comment on attachment 430926 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=430926&action=review > Source/WebCore/page/Performance.h:78 > + DOMHighResTimeStamp timeOrigin() const; Is this time origin varied across origins? Otherwise, it can create cross-origin tracking vector, right? Comment on attachment 430926 [details] patch View in context: https://bugs.webkit.org/attachment.cgi?id=430926&action=review >> Source/WebCore/page/Performance.h:78 >> + DOMHighResTimeStamp timeOrigin() const; > > Is this time origin varied across origins? > Otherwise, it can create cross-origin tracking vector, right? This time stamp is in milliseconds since 1970, so it doesn't identify the user that way. The value is from the time the DocumentLoader started loading the Document (seen in DOMWindow::performance) or the time that the Worker was created (seen in WorkerGlobalScope::WorkerGlobalScope) which should not lead to a tracking vector. This value is already indirectly exposed through Performance::now, which is the number of milliseconds since this time. I'm hoping this is covered by tests. Waiting on EWS. If it isn't, I'll write some. Created attachment 430935 [details]
Patch
|