Closed derhuerst closed 4 years ago
More discussions & background info on privacy implications can be found in the corresponding HN thread.
Thank you, useful notes and I agree! Will work on this.
Closing this as we've implemented most of these suggestions. :)
Thanks for building a tool that will hopefully help the public hold government forces accountable!
As the deployed version is a public website, it could send your unscrubbed images to a server, exposing people in the photos as well as your IP, browser fingerprint, etc.
Content-Security-Policy
ofdefault-src 'self'
(and probably a few more directives) to limit the attack surface for creepy middleware (like misbehaving antivirus systems, browser extensions, router-based spyware, etc).