- From: Nishant J. via GitHub <noreply@w3.org>
- Date: Tue, 24 Feb 2026 06:50:18 +0000
- To: public-css-archive@w3.org
Thanks — I agree the current text captures the baseline risk of UA exposure of user preferences via getComputedStyle(). My concern is slightly narrower: extensions, assistive technologies, or managed policies can introduce additional distinguishable rendering states beyond default UA preference exposure (e.g., non-default palettes, consistent cross-origin overrides, or systematic use of forced-color-adjust). These outcomes are observable through the same mechanisms and can add fingerprinting entropy or create ambiguity about the source of the rendering. I’m not suggesting a major change... just that clarifying the privacy note to include “other non-author/UA-mediated overrides” would make the scope explicit and avoid the interpretation that only baseline UA preference exposure is relevant. Although, I agree this isn't super critical, and would leave it upto the team to decide. :D -- GitHub Notification of comment by realArcherL Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/13460#issuecomment-3949600228 using your GitHub account -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Tuesday, 24 February 2026 06:50:19 UTC