Support #75
ServiceWorkers
0%
Description
Investigate into Service Workers. Find out if some additional measures need to be taken against them
History
Updated by jahoti about 2 years ago
The following script will deregister all service workers in a page (courtesy of https://love2dev.com/blog/how-to-uninstall-a-service-worker/):
if (navigator.serviceWorker) { navigator.serviceWorker.getRegistrations().then( registrations => { for (let registration of registrations) registration.unregister(); } ); }
EDIT: removed exclamation mark in if
~koszko
Updated by koszko about 2 years ago
Unfortunately, it seems a page reload is required for this to take effect.
Additionally, is there a way service worker could intercept HTTP headers and, in them, Hachette cookies?
Updated by jahoti about 2 years ago
Unfortunately, it seems a page reload is required for this to take effect.
Additionally, is there a way service worker could intercept HTTP headers and, in them, Hachette cookies?
Ohhh- that's quite a serious issue if it is indeed possible. If it turns out to work, perhaps we could present some version of this information on installation/start-up whenever service workers are available.
Updated by koszko almost 2 years ago
jahoti wrote:
perhaps we could present some version of this information on installation/start-up whenever service workers are available.
Temporarily, this is a good idea. Ultimately, we should stop using cookies for policy smuggling, even though they initially seemed like a super good idea :/
Updated by koszko almost 2 years ago
I added unregistering code on koszko
branch. It needs testing
Updated by jahoti almost 2 years ago
Ultimately, we should stop using cookies for policy smuggling, even though they initially seemed like a super good idea :/
Somehow, it seems the biggest technical challenge for this project has become blocking (unwanted) scripts of all things.
Updated by koszko almost 2 years ago
jahoti wrote:
Somehow, it seems the biggest technical challenge for this project has become blocking (unwanted) scripts of all things.
Unfortunately, I have to agree
Updated by jahoti almost 2 years ago
I unfortunately couldn't test this, as I couldn't find any test cases or understand how to set one up.