Hide all plugin names except Flash, Java, and QuickTime
https://bugs.webkit.org/show_bug.cgi?id=149014
Reviewed by Darin Adler.
Source/WebCore:
Revise plugin interface so that sites cannot iterate over all plugins to obtain
a list of installed plugins for fingerprinting purposes. Sites need to ask for
specific plugins by name, rather than iterating and comparing to avoid making
this information accessible for fingerprinting purposes.
* plugins/DOMPluginArray.cpp:
(WebCore::DOMPluginArray::length): Only return length of the plugins we are
allowing to be seen.
(WebCore::DOMPluginArray::item): Only iterate through the plugins we are
allowing to be seen.
* plugins/PluginData.cpp:
(WebCore::PluginData::publiclyVisiblePlugins): Added.
* plugins/PluginData.h:
LayoutTests:
Update tests to notify internals that all plugins should be shown, not
just the publicly available ones.
* plugins/plugin-javascript-access.html:
* plugins/script-tests/navigator-mimeTypes-length.js:
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@191211 268f45cc-cd09-0410-ab3c-d52691b4dbfc
11 files changed
