privacytests / privacytests.org

Source code for privacytests.org. Includes browser testing code and site rendering.
https://privacytests.org
MIT License
797 stars 23 forks source link

Test favicons loaded by <link rel="icon" href="..." /> #130

Closed arichiv closed 1 year ago

arichiv commented 1 year ago

In Chrome favicons loaded via a link tag go in a different cache than the general http resource cache. I recently fixed an issue in Chrome which allowed cross-origin history sniffing, and it might be worth testing here as well. Let me know if I misunderstand the underlying favicon test currently used.

arthuredelstein commented 1 year ago

Hi Ari -- thank you so much for letting me know! The latest published test results shows that favicons are indeed now partitioned in Chrome Canary (107.0): https://privacytests.org/nightly.html

And this result is new since Chrome Canary 106.0 a couple of weeks before: https://privacytests.org/archive/issue30/nightly.html

Once Chrome 106 reaches Stable, this will be visible on the main page as well.

Thanks again for getting in touch and for this awesome work! 🥳