W3C home > Mailing lists > Public > public-css-archive@w3.org > September 2020

[csswg-drafts] css-color-adjust-1 "forced colours mode" re-introduces a privacy concern (#5548)

From: Mallory Knodel via GitHub <sysbot+gh@w3.org>
Date: Thu, 24 Sep 2020 16:36:58 +0000
To: public-css-archive@w3.org
Message-ID: <issues.opened-708317250-1600965416-sysbot+gh@w3.org>
mallory has just created a new issue for https://github.com/w3c/csswg-drafts:

== css-color-adjust-1 "forced colours mode" re-introduces a privacy concern ==
I reviewed [css-color-4] and found that the deprecated systemcolors are necessarily back because of the use of forced colors mode. Even as per the current privacy and security considerations section of [css-color-adjust-1]:

{{
Applying user color preferences via color schemes or forced colors mode expose the user’s color preferences to the page, which can increase fingerprinting surface.
}}

It would be better if these were only available to the user-agent in order to do the color mapping.

[css-color-4] https://drafts.csswg.org/css-color-4/#deprecated-system-colors
[css-color-adjust-1] https://drafts.csswg.org/css-color-adjust-1/#privsec


Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5548 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Thursday, 24 September 2020 16:36:59 UTC

This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 06:42:17 UTC