search

firefox-devtools / profiler

Firefox Profiler — Web app for Firefox performance analysis
https://profiler.firefox.com
Mozilla Public License 2.0
1.14k stars 372 forks source link

Advise to run the profiler tool in a dedicated profile #2296

Open arroway opened 4 years ago

arroway commented 4 years ago

This bug is opened as a follow-up of the Profiler server Rapid Risk Assessment (see Risk Record bug).

In the current state of things, data from all tabs are being captured in the profile. This could result in uploading potentially and accidentally sensitive/private data online which could not be immediately deleted by users. Advising people to use a dedicated profile before capturing data could be a mitigation measure against this particular scenario.

CC'ing julienw for follow-up on the RRA.

┆Issue is synchronized with this Jira Task

julienw commented 4 years ago

We discussed this with the team (esp @gregtatum). Now we believe that our work on "active tab profiling" will handle this use case.

The current work will do some active track hiding after capturing, therefore when the user shares the profile the hidden tracks are removed (by default in devedition/beta/nightly). This is due this month.

There's also some yet-unplanned work ahead where we would capture only the data related to the active tab.