additional query string parameter strip list

[drzraf]

Platforms

all

Description

Suggested, but not sure how "personal" the (seemingly unique) identifier is:

• _fbp + fbc
• _gcl_au
• hootPostID
• hsctatracking
• igshid (Instagram)
• mkt_tok

[fmarier]

Thanks for sharing these, I will take a look at them. Do you happen to have example URLs where you've seen them in the wild? Or you found them in the documentation pages you linked to?

[fmarier]

These ones we already have:

• hsctatracking

https://github.com/brave/brave-core/blob/29a27521a3df5463cf008edbd2113d405f05aaaa/components/query_filter/utils.cc#L71

• igshid (Instagram)

https://github.com/brave/brave-core/blob/29a27521a3df5463cf008edbd2113d405f05aaaa/components/query_filter/utils.cc#L142

• mkt_tok

https://github.com/brave/brave-core/blob/29a27521a3df5463cf008edbd2113d405f05aaaa/components/query_filter/utils.cc#L129

[drzraf]

These ones we already have:

Sorry, I overlooked the secondary listings in utils.cc

And yes, these QSP all hit my servers logs in a way or another (generally bypassing my query-string filters / invalidating caches) with their seemingly unique/random values. That's how I discover them (but I can't ensure they always convey personally identifiable information)

[fmarier]

Can you say more about how they're hitting your server? Are you driving traffic to your website using ads and newsletters? Or are you seeing these in the Referrers?