Stoutner - Redmine: Issueshttps://redmine.stoutner.com/https://redmine.stoutner.com/favicon.ico?16699090422017-12-25T21:18:53ZStoutner - Redmine
Redmine Privacy Browser Android - Feature #234 (New): Option to block sending of timezonehttps://redmine.stoutner.com/issues/2342017-12-25T21:18:53ZSoren Stoutnersoren@stoutner.com
<p>Makes browser fingerprinting more difficult.</p>
<p><a class="external" href="https://panopticlick.eff.org">https://panopticlick.eff.org</a>.</p> Privacy Browser Android - Feature #233 (New): Spoof screen sizehttps://redmine.stoutner.com/issues/2332017-12-25T21:18:22ZSoren Stoutnersoren@stoutner.com
<p>Makes browser fingerprinting more difficult. The Tor browser does this by sending screen sizes in buckets (phone, tablet, desktop).</p> Privacy Browser Android - Feature #232 (New): Generic spoof of canvas finterprint hashhttps://redmine.stoutner.com/issues/2322017-12-25T21:17:11ZSoren Stoutnersoren@stoutner.com
<p>Makes browser fingerprinting more difficult.</p>
<p><a class="external" href="https://panopticlick.eff.org">https://panopticlick.eff.org</a>.</p> Privacy Browser Android - Feature #210 (New): Specify Privacy WebView's SSL settingshttps://redmine.stoutner.com/issues/2102017-09-29T06:39:41Zbill bunter
<p>If you included open SSL in privacy browser would that allow to for user to disable weak TLS ciphers that are still in the Android open SSL on older phones? And even to specify cipher suite to be used in Domain pinning?</p> Privacy Browser Android - Feature #208 (New): Calculate SSL certificate fingerprintshttps://redmine.stoutner.com/issues/2082017-09-29T06:16:29Zbill bunter
<p>Would like to see certificate fingerprint on the certificate dialogue.<br />Android 4.4.2<br />WebKit 537.36</p> Privacy Browser Android - Feature #190 (New): Display the SSL certificate serial numberhttps://redmine.stoutner.com/issues/1902017-09-04T15:14:40ZSoren Stoutnersoren@stoutner.com
<p>It should be possible to extract this from WebView.</p>
<p><a class="external" href="https://www.ssllabs.com/ssltest/analyze.html?d=www.stoutner.com">https://www.ssllabs.com/ssltest/analyze.html?d=www.stoutner.com</a></p> Privacy Browser Android - Feature #189 (New): Apply the user agent to resource requestshttps://redmine.stoutner.com/issues/1892017-08-31T20:10:52ZSoren Stoutnersoren@stoutner.com
<p>Currently it is only applied when loading a URL but not to resource requests.</p> Privacy Browser Android - Feature #183 (New): Reader Modehttps://redmine.stoutner.com/issues/1832017-08-28T20:15:07ZSoren Stoutnersoren@stoutner.com
<p>Add a reading mode, that reformats the webpage to display only the body text. This will likely be a time consuming feature to implement unless Google adds it to `WebView`.</p> Privacy Browser Android - Feature #182 (New): Allow users to manually or automatically update the...https://redmine.stoutner.com/issues/1822017-08-18T16:36:55ZSoren Stoutnersoren@stoutner.com
<p>In the Filter Lists Activity, display the last update timestamp of the filter list (which will be updated every so often with new releases).</p>
<p>Allow the users to manually update the list, which will pull the current version from EasyList.</p>
<p>Allow the users to set updates to happen automatically, like once a day or once a week. This will run an asynchronous task when Privacy Browser starts.</p> Privacy Browser Android - Feature #86 (New): Create a rolling fork of WebView called Privacy WebViewhttps://redmine.stoutner.com/issues/862017-02-13T17:08:40ZSoren Stoutnersoren@stoutner.com
<p>This will be a rolling fork composed of a series of minimally invasive patches that will be rebased on each upstream release of Android's WebView. API compatibility will be maintained with WebView, in the sense that no methods will be removed (although some might become a NOOP or otherwise be modified). New methods will also be added providing increased privacy controls. This design will allow Privacy WebView to replace Android's WebView on custom ROMs without breaking other programs that use WebView.</p> Privacy Browser Android - Feature #62 (New): Add an option to disable WebRTChttps://redmine.stoutner.com/issues/622016-09-15T04:55:08ZSoren Stoutnersoren@stoutner.com
<p>WebRTC can leak local IP information even when using Orbot. Either we need to find a way to proxy it as well (perhaps with SOCKS) or disable it.</p>
<p><a class="external" href="https://ipleak.net/">https://ipleak.net/</a></p>
<p>WebRTC only works when JavaScript is enabled.</p> Privacy Browser Android - Feature #37 (New): Competely remove the X-Requested-With headerhttps://redmine.stoutner.com/issues/372016-06-28T18:15:10ZSoren Stoutnersoren@stoutner.com
<p>By default, WebView sends an X-Requested-With header with the application ID (com.stoutner.privacybrowser.standard) with every page load. It looks like it is possible to change the header, but not to leave it out (Lightning sends the header with a null value).</p>
<p><a class="external" href="http://stackoverflow.com/questions/17832313/android-disable-x-requested-with-header-in-webview">http://stackoverflow.com/questions/17832313/android-disable-x-requested-with-header-in-webview</a></p>
<p><a class="external" href="http://stackoverflow.com/questions/7610790/add-custom-headers-to-webview-resource-requests-android#comment10183596_8209272">http://stackoverflow.com/questions/7610790/add-custom-headers-to-webview-resource-requests-android#comment10183596_8209272</a></p>
<p>At a minimum, it would be nice to allow the user to set a custom header. Ultimately, we might need to embed a custom WebView to get full control of the functionality.</p> Privacy Browser Android - Feature #35 (New): Form Data Managementhttps://redmine.stoutner.com/issues/352016-06-27T19:15:02ZSoren Stoutnersoren@stoutner.com
<p>Create an interface for viewing and managing form data.</p> Privacy Browser Android - Feature #34 (New): WebView Cache Controlshttps://redmine.stoutner.com/issues/342016-06-27T17:23:17ZSoren Stoutnersoren@stoutner.com
<p>Create controls for handling WebView's cache.</p> Privacy Browser Android - Feature #6 (New): Fine grained DOM storage interfacehttps://redmine.stoutner.com/issues/62016-03-03T03:55:55ZSoren Stoutnersoren@stoutner.com
<p>Create an interface to view and edit DOM storage entries.</p>