← Back to team overview

ubuntu-apps-bugs team mailing list archive

[Bug 1551686] [NEW] browser leaks old location data to web pages

 

Public bug reported:

visit a web page that requests your current location, for example http
://where-am-i.net it prompts to get permission to share the current
location, hit allow and it will probably show where you were a few hours
ago as the GPS will have a cached location. Refreshing won't update the
location, only applications that subscribe to updates cause the GPS to
get a new location.

The problem here is that I authorised the web page to know where I am
now. I am OK with giving my current position to the web page requesting
it. I *didn't* authorise it to know where I was yesterday or this
morning, and I might have reasons to not want it to know where my house
is, even though I am fine with it knowing where I am right now.

The web browser app should not reveal GPS locations that are older than
the decision to allow location to be shared with the page.

** Affects: webbrowser-app (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Apps bug tracking, which is subscribed to webbrowser-app in Ubuntu.
https://bugs.launchpad.net/bugs/1551686

Title:
  browser leaks old location data to web pages

Status in webbrowser-app package in Ubuntu:
  New

Bug description:
  visit a web page that requests your current location, for example http
  ://where-am-i.net it prompts to get permission to share the current
  location, hit allow and it will probably show where you were a few
  hours ago as the GPS will have a cached location. Refreshing won't
  update the location, only applications that subscribe to updates cause
  the GPS to get a new location.

  The problem here is that I authorised the web page to know where I am
  now. I am OK with giving my current position to the web page
  requesting it. I *didn't* authorise it to know where I was yesterday
  or this morning, and I might have reasons to not want it to know where
  my house is, even though I am fine with it knowing where I am right
  now.

  The web browser app should not reveal GPS locations that are older
  than the decision to allow location to be shared with the page.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/webbrowser-app/+bug/1551686/+subscriptions


Follow ups