The Web Design Group

... Making the Web accessible to all.

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Firefox 102 privacy feature strips URLs of tracking parameters
Christian J
post Jul 4 2022, 05:15 PM
Post #1


.
********

Group: WDG Moderators
Posts: 9,176
Joined: 10-August 06
Member No.: 7



https://www.bleepingcomputer.com/news/secur...ing-parameters/

"With the release of Firefox 102, Mozilla has added the new 'Query Parameter Stripping' feature that automatically strips various query parameters used for tracking from URLs when you open them, whether that be by clicking on a link or simply pasting the URL into the address bar.

Once enabled, Mozilla Firefox will now strip the following tracking parameters from URLs when you click on links or paste an URL into the address bar:

Olytics: oly_enc_id=, oly_anon_id=
Drip: __s=
Vero: vero_id=
HubSpot: _hsenc=
Marketo: mkt_tok=
Facebook: fbclid=, mc_eid=
...
there are additional trackers that are not being filtered, which privacy-focused Brave Browser currently blocks."
User is offlinePM
Go to the top of the page
Toggle Multi-post QuotingQuote Post
pandy
post Jul 5 2022, 05:50 AM
Post #2


🌟Computer says no🌟
********

Group: WDG Moderators
Posts: 20,216
Joined: 9-August 06
Member No.: 6



Does it tell us when it does that?
User is offlinePM
Go to the top of the page
Toggle Multi-post QuotingQuote Post
Christian J
post Jul 5 2022, 05:58 AM
Post #3


.
********

Group: WDG Moderators
Posts: 9,176
Joined: 10-August 06
Member No.: 7



Seems not. There's a test page here: https://www.bleepingcomputer.com/PoC/qs.html (remember to enable Strict Tracking protection in Firefox).

If the list of filtered parameters grow over time, I imagine the risk will increase that some innocent web developers use the same ones by mistake...
User is offlinePM
Go to the top of the page
Toggle Multi-post QuotingQuote Post
pandy
post Jul 5 2022, 06:25 AM
Post #4


🌟Computer says no🌟
********

Group: WDG Moderators
Posts: 20,216
Joined: 9-August 06
Member No.: 6



I'll try later. I haven't updated.

Yes. Like with web washing software that reject certain file names. We had quite a few question related to that some 10 years ago. I think it was a well known AV. It was pretty generic names too. Don't remember any now, but like ad.gif...

Maybe parameters will need to be prefixed with something unique. Like here html or help could be used. help_abc and so on. Tedious.
User is offlinePM
Go to the top of the page
Toggle Multi-post QuotingQuote Post
Christian J
post Jul 5 2022, 12:24 PM
Post #5


.
********

Group: WDG Moderators
Posts: 9,176
Joined: 10-August 06
Member No.: 7



QUOTE(pandy @ Jul 5 2022, 01:25 PM) *

Maybe parameters will need to be prefixed with something unique. Like here html or help could be used. help_abc and so on. Tedious.

True.

But isn't it a fundamental flaw of URLs in general that querystring parameters can be changed by anyone besides the site owner? (Of course the parameter values must be allowed to change, that's often their purpose when submitting a form.) But I guess another more strict system would become a bit complicated.
User is offlinePM
Go to the top of the page
Toggle Multi-post QuotingQuote Post
pandy
post Jul 5 2022, 04:40 PM
Post #6


🌟Computer says no🌟
********

Group: WDG Moderators
Posts: 20,216
Joined: 9-August 06
Member No.: 6



How do you mean? To what use is it to change the names in querystring? unsure.gif
User is offlinePM
Go to the top of the page
Toggle Multi-post QuotingQuote Post
Christian J
post Sep 7 2022, 11:20 AM
Post #7


.
********

Group: WDG Moderators
Posts: 9,176
Joined: 10-August 06
Member No.: 7



Missed you reply, sorry!

QUOTE
To what use is it to change the names in querystring? unsure.gif

For the tracking companies? For tracking, I suppose. Not sure exactly how it's done.
User is offlinePM
Go to the top of the page
Toggle Multi-post QuotingQuote Post

Reply to this topicStart new topic
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:

 



- Lo-Fi Version Time is now: 4th October 2022 - 08:37 AM