NEW 282632
Advanced tracking and fingerprinting treats extension content scripts as 3rd party trackers 
https://bugs.webkit.org/show_bug.cgi?id=282632
Summary Advanced tracking and fingerprinting treats extension content scripts as 3rd ...
Jeff Johnson
Reported 2024-11-05 12:22:32 PST
Created attachment 473146 [details] Sample Xcode project Steps to reproduce: 1) Download, build, run, and enable the attached Safari extension TrackingBug in Safari 2) Allow Tracking Bug in private browsing 3) Enable advanced tracking and fingerprinting protection in private browsing 4) Open https://lapcatsoftware.com/articles/2024/6/5.html in Safari 5) Click the link https://underpassapp.com/test/gtag.html?q=search Expected results: The content script shows an alert on the page identifying window.location.search as "?q=search". Actual results: The content script shows an alert on the page that identifying window.location.search as "". Advanced tracking and fingerprinting protection is treating the Safari extension content script as a third-party tracker on the page, thereby restricting its access to the URL query. This bug breaks several features of my Safari extension StopTheMadness Pro, such as copying the page URL and removing parameters from the page URL.
Attachments
Sample Xcode project (333.22 KB, application/zip)
2024-11-05 12:22 PST, Jeff Johnson 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2024-11-05 12:22:40 PST
<rdar://problem/139305676>
Note You need to log in before you can comment on or make changes to this bug.