- From: Mallory Knodel via GitHub <sysbot+gh@w3.org>
- Date: Thu, 24 Sep 2020 16:36:58 +0000
- To: public-css-archive@w3.org
mallory has just created a new issue for https://github.com/w3c/csswg-drafts:
== css-color-adjust-1 "forced colours mode" re-introduces a privacy concern ==
I reviewed [css-color-4] and found that the deprecated systemcolors are necessarily back because of the use of forced colors mode. Even as per the current privacy and security considerations section of [css-color-adjust-1]:
{{
Applying user color preferences via color schemes or forced colors mode expose the user’s color preferences to the page, which can increase fingerprinting surface.
}}
It would be better if these were only available to the user-agent in order to do the color mapping.
[css-color-4] https://drafts.csswg.org/css-color-4/#deprecated-system-colors
[css-color-adjust-1] https://drafts.csswg.org/css-color-adjust-1/#privsec
Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5548 using your GitHub account
--
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Thursday, 24 September 2020 16:36:59 UTC