Android Browsers(default settings) |
brave 1.94 |
chrome 152.0 |
duckduckgo 5.292 |
edge 151.0 |
firefox 154.0 |
focus 154.0 |
opera 101.1 |
samsung 30.0 |
tor 15.0 |
vivaldi 8.1 |
yandex 26.8 |
|---|---|---|---|---|---|---|---|---|---|---|---|
|
State Partitioning testsWhich browsers isolate websites to prevent them from sharing data to track you?
A common vulnerability of web browsers is that they allow tracking companies to 'tag' your browser with some data ('state') that identifies you. When third-party trackers are embedded in websites, they can see this identifying data as you browse to different websites. Fortunately, it is possible for this category of leaks to be fixed by partitioning all data stored in the browser such that no data can be shared between websites.
|
|||||||||||
|
Alt-Svc
Alt-Svc allows the server to indicate to the web browser that a resource should be loaded on a different server. Because this is a persistent setting, it could be used to track users across websites if it is not correctly partitioned. |
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party: h3, h3, h3, h3, h3
result, different first party: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: h2, h2, h2, h2, h2
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party: h3, h3, h3, h3, h3
result, different first party: h3, h3, h3, h3, h3
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party: h3, h3, h3, h3, h3
result, different first party: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party: h3, h3, h3, h3, h3
result, different first party: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party: h3, h3, h3, h3, h3
result, different first party: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party: h3, h3, h3, h3, h3
result, different first party: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: h2, h2, h2, h2, h2
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: h2, h2, h2, h2, h2
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party: h3, h3, h3, h3, h3
result, different first party: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same first party: h3, h3, h3, h3, h3
result, different first party: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
blob
A 'blob URL' is a local reference to some raw data. Trackers can use a blob URL to share data between websites. |
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
result, different first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
result, different first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
result, different first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
result, different first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.
result, different first party:
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.
result, different first party:
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
result, different first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
result, different first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.
result, different first party:
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.,
Error: NetworkError when attempting to fetch resource.
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
result, different first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
try {
const blobURL = URL.createObjectURL(new Blob([secret]));
fetch(`${baseURI}blob?mode=write&key=${secret}&blobUrl=${encodeURIComponent(blobURL)}`);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async (secret) => {
const response = await fetch(`${baseURI}blob?mode=read&key=${secret}`);
const result = await response.json();
const blobUrl = decodeURIComponent(result.blobUrl);
const blobResponse = await fetch(blobUrl);
return blobResponse.text();
}
result, same first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
result, different first party:
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch,
Error: Failed to fetch
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
BroadcastChannel
A BroadcastChannel is designed to send messages between tabs. In some browsers it can be used for cross-site communication and tracking. |
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: (secret) => {
try {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data === 'request') {
bc.postMessage(secret);
}
};
} catch (e) {
throw new Error('Unsupported');
}
}
read: () =>
new Promise((resolve, reject) => {
const bc = new BroadcastChannel('secrets');
bc.onmessage = (event) => {
if (event.data !== 'request') {
resolve(event.data);
}
};
bc.postMessage('request');
setTimeout(() => reject(new Error('no BroadcastChannel message')), 3000);
})
result, same first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
result, different first party:
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message,
Error: no BroadcastChannel message
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
|
CacheStorage
The Cache API is a content storage mechanism originally introduced to support ServiceWorkers. If the same Cache object is accessible to multiple websites, it can be abused to track users. |
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
93eaf5a5-76ad-4428-95ba-644a045f5fb0,
93eaf5a5-76ad-4428-95ba-644a045f5fb0,
93eaf5a5-76ad-4428-95ba-644a045f5fb0,
93eaf5a5-76ad-4428-95ba-644a045f5fb0,
93eaf5a5-76ad-4428-95ba-644a045f5fb0
result, different first party:
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url')
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
959429c0-a844-4657-b5ef-4f5c37edc0b5,
959429c0-a844-4657-b5ef-4f5c37edc0b5,
959429c0-a844-4657-b5ef-4f5c37edc0b5,
959429c0-a844-4657-b5ef-4f5c37edc0b5,
959429c0-a844-4657-b5ef-4f5c37edc0b5
result, different first party:
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url')
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p
result, different first party:
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
985bcd53-4046-45b8-9005-f0d78d2467c5,
985bcd53-4046-45b8-9005-f0d78d2467c5,
985bcd53-4046-45b8-9005-f0d78d2467c5,
985bcd53-4046-45b8-9005-f0d78d2467c5,
985bcd53-4046-45b8-9005-f0d78d2467c5
result, different first party:
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url')
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
39122539-ac2b-4685-b7fc-0e032c9e090b,
39122539-ac2b-4685-b7fc-0e032c9e090b,
39122539-ac2b-4685-b7fc-0e032c9e090b,
39122539-ac2b-4685-b7fc-0e032c9e090b,
39122539-ac2b-4685-b7fc-0e032c9e090b
result, different first party:
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d,
dac26500-75b6-440b-bd39-c5a4cb45b8cb,
42bed404-de0d-4d53-b99c-9957a5d84935,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc
result, different first party:
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
3648669b-4782-44ed-afd2-7a44481bcce3,
3648669b-4782-44ed-afd2-7a44481bcce3,
3648669b-4782-44ed-afd2-7a44481bcce3,
3648669b-4782-44ed-afd2-7a44481bcce3,
3648669b-4782-44ed-afd2-7a44481bcce3
result, different first party:
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url')
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
dd2b3793-d7ae-4afb-9426-21d4f333a8d3,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3
result, different first party:
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url')
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c,
70c18ec0-55ec-49cb-aa52-4be50e504999,
ef22704d-27b8-4d98-bf39-01993ccca959,
9f1a6433-6013-4220-8d99-020f165e1ea3
result, different first party:
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
265951d2-7fcf-4936-8a33-7399094b355d,
265951d2-7fcf-4936-8a33-7399094b355d,
265951d2-7fcf-4936-8a33-7399094b355d,
265951d2-7fcf-4936-8a33-7399094b355d,
265951d2-7fcf-4936-8a33-7399094b355d
result, different first party:
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url')
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same first party:
a95a4e43-4c82-40e8-8dec-72c300d02d1e,
a95a4e43-4c82-40e8-8dec-72c300d02d1e,
a95a4e43-4c82-40e8-8dec-72c300d02d1e,
a95a4e43-4c82-40e8-8dec-72c300d02d1e,
a95a4e43-4c82-40e8-8dec-72c300d02d1e
result, different first party:
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url'),
Error: Cannot read properties of undefined (reading 'url')
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
cookie (HTTP)
The cookie, first introduced by Netscape in 1994, is a small amount of data stored by your browser on a website's behalf. It has legitimate uses, but it is also the classic cross-site tracking mechanism, and today still the most popular method of tracking users across websites. Browsers can stop cookies from being used for cross-site tracking by either blocking or partitioning them. |
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8_http,
f26a2183-950a-4683-b904-12aeb1d2072b_http,
bedd0c39-a154-4a8f-a181-961237dc6685_http,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_http,
26593216-615b-49e5-9d37-3337d7d766e6_http
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_http,
087bbd18-2f31-44a2-bed8-d69a42f4931f_http,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_http,
a516b344-3178-425e-a92c-fd669b2ab46d_http,
490a9f95-0ed2-404e-909f-0c385f812351_http
result, different first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_http,
087bbd18-2f31-44a2-bed8-d69a42f4931f_http,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_http,
a516b344-3178-425e-a92c-fd669b2ab46d_http,
490a9f95-0ed2-404e-909f-0c385f812351_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_http,
f2720e51-3a8e-473b-9462-1b8c9f860da0_http,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_http,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_http,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_http
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_http,
b057a3e1-eabe-4063-8914-511e904b99f5_http,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_http,
54e87806-0159-46ee-aba8-9a081565e4e3_http,
a41840c1-87b9-4c43-9c09-162379992b41_http
result, different first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_http,
b057a3e1-eabe-4063-8914-511e904b99f5_http,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_http,
54e87806-0159-46ee-aba8-9a081565e4e3_http,
a41840c1-87b9-4c43-9c09-162379992b41_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb_http,
899c1527-1c38-46be-a86e-41e668b85dd9_http,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_http,
2f39d051-52c6-40a7-8461-157def5df61b_http,
2d007624-62c1-440b-95e9-ddbde79d9272_http
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_http,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_http,
42bed404-de0d-4d53-b99c-9957a5d84935_http,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_http,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_http
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_http,
91e60022-64f5-4b47-8d0a-65e68a26fb32_http,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_http,
9d09a8a3-2165-4558-9dc0-76a995659c40_http,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_http
result, different first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_http,
91e60022-64f5-4b47-8d0a-65e68a26fb32_http,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_http,
9d09a8a3-2165-4558-9dc0-76a995659c40_http,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_http,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_http,
3bd7615a-3c77-45fc-9885-e4323b5fb346_http,
4cfede65-6a61-41c5-9886-5955cceade7a_http,
3730f2bc-98c5-4fdd-ad6a-8779db336886_http
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5_http,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c_http,
70c18ec0-55ec-49cb-aa52-4be50e504999_http,
ef22704d-27b8-4d98-bf39-01993ccca959_http,
9f1a6433-6013-4220-8d99-020f165e1ea3_http
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_http,
3fd13172-3a7c-450f-b720-d6726ff02716_http,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_http,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_http,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_http
result, different first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_http,
3fd13172-3a7c-450f-b720-d6726ff02716_http,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_http,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_http,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e_http,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_http,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_http,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_http,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_http
result, different first party:
d565e489-86bc-4b04-9426-0180c2460d3e_http,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_http,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_http,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_http,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
cookie (JS)
The cookie, first introduced by Netscape in 1994, is a small amount of data stored by your browser on a website's behalf. It has legitimate uses, but it is also the classic cross-site tracking mechanism, and today still the most popular method of tracking users across websites. Browsers can stop cookies from being used for cross-site tracking by either blocking or partitioning them. |
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8_js,
f26a2183-950a-4683-b904-12aeb1d2072b_js,
bedd0c39-a154-4a8f-a181-961237dc6685_js,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_js,
26593216-615b-49e5-9d37-3337d7d766e6_js
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_js,
087bbd18-2f31-44a2-bed8-d69a42f4931f_js,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_js,
a516b344-3178-425e-a92c-fd669b2ab46d_js,
490a9f95-0ed2-404e-909f-0c385f812351_js
result, different first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_js,
087bbd18-2f31-44a2-bed8-d69a42f4931f_js,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_js,
a516b344-3178-425e-a92c-fd669b2ab46d_js,
490a9f95-0ed2-404e-909f-0c385f812351_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_js,
f2720e51-3a8e-473b-9462-1b8c9f860da0_js,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_js,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_js,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_js
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_js,
b057a3e1-eabe-4063-8914-511e904b99f5_js,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_js,
54e87806-0159-46ee-aba8-9a081565e4e3_js,
a41840c1-87b9-4c43-9c09-162379992b41_js
result, different first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_js,
b057a3e1-eabe-4063-8914-511e904b99f5_js,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_js,
54e87806-0159-46ee-aba8-9a081565e4e3_js,
a41840c1-87b9-4c43-9c09-162379992b41_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb_js,
899c1527-1c38-46be-a86e-41e668b85dd9_js,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_js,
2f39d051-52c6-40a7-8461-157def5df61b_js,
2d007624-62c1-440b-95e9-ddbde79d9272_js
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_js,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_js,
42bed404-de0d-4d53-b99c-9957a5d84935_js,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_js,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_js
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_js,
91e60022-64f5-4b47-8d0a-65e68a26fb32_js,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_js,
9d09a8a3-2165-4558-9dc0-76a995659c40_js,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_js
result, different first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_js,
91e60022-64f5-4b47-8d0a-65e68a26fb32_js,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_js,
9d09a8a3-2165-4558-9dc0-76a995659c40_js,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_js,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_js,
3bd7615a-3c77-45fc-9885-e4323b5fb346_js,
4cfede65-6a61-41c5-9886-5955cceade7a_js,
3730f2bc-98c5-4fdd-ad6a-8779db336886_js
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5_js,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c_js,
70c18ec0-55ec-49cb-aa52-4be50e504999_js,
ef22704d-27b8-4d98-bf39-01993ccca959_js,
9f1a6433-6013-4220-8d99-020f165e1ea3_js
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_js,
3fd13172-3a7c-450f-b720-d6726ff02716_js,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_js,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_js,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_js
result, different first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_js,
3fd13172-3a7c-450f-b720-d6726ff02716_js,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_js,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_js,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e_js,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_js,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_js,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_js,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_js
result, different first party:
d565e489-86bc-4b04-9426-0180c2460d3e_js,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_js,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_js,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_js,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
CookieStore
The Cookie Store API is an alternative asynchronous API for managing cookies, supported by some browsers. |
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8,
f26a2183-950a-4683-b904-12aeb1d2072b,
bedd0c39-a154-4a8f-a181-961237dc6685,
4e199ab4-ae9e-4536-b1e3-91ae791626bb,
26593216-615b-49e5-9d37-3337d7d766e6
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
087bbd18-2f31-44a2-bed8-d69a42f4931f,
09debfcd-ca11-4515-90d0-0d65d9e59f9d,
a516b344-3178-425e-a92c-fd669b2ab46d,
490a9f95-0ed2-404e-909f-0c385f812351
result, different first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
087bbd18-2f31-44a2-bed8-d69a42f4931f,
09debfcd-ca11-4515-90d0-0d65d9e59f9d,
a516b344-3178-425e-a92c-fd669b2ab46d,
490a9f95-0ed2-404e-909f-0c385f812351
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193,
b057a3e1-eabe-4063-8914-511e904b99f5,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
54e87806-0159-46ee-aba8-9a081565e4e3,
a41840c1-87b9-4c43-9c09-162379992b41
result, different first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193,
b057a3e1-eabe-4063-8914-511e904b99f5,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
54e87806-0159-46ee-aba8-9a081565e4e3,
a41840c1-87b9-4c43-9c09-162379992b41
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb,
899c1527-1c38-46be-a86e-41e668b85dd9,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e,
2f39d051-52c6-40a7-8461-157def5df61b,
2d007624-62c1-440b-95e9-ddbde79d9272
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d,
dac26500-75b6-440b-bd39-c5a4cb45b8cb,
42bed404-de0d-4d53-b99c-9957a5d84935,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
91e60022-64f5-4b47-8d0a-65e68a26fb32,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
9d09a8a3-2165-4558-9dc0-76a995659c40,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b
result, different first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
91e60022-64f5-4b47-8d0a-65e68a26fb32,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
9d09a8a3-2165-4558-9dc0-76a995659c40,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c,
70c18ec0-55ec-49cb-aa52-4be50e504999,
ef22704d-27b8-4d98-bf39-01993ccca959,
9f1a6433-6013-4220-8d99-020f165e1ea3
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
3fd13172-3a7c-450f-b720-d6726ff02716,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
result, different first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
3fd13172-3a7c-450f-b720-d6726ff02716,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
db892d3d-9567-46ff-89ee-7cdbc3e2d282
result, different first party:
d565e489-86bc-4b04-9426-0180c2460d3e,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
db892d3d-9567-46ff-89ee-7cdbc3e2d282
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
CSS cache
CSS stylesheets are cached, and if that cache is shared between websites, it can be used to track users across sites. |
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_10110165981918207,
fake_17671355957939983,
fake_8984680012121522,
fake_7888110333257723,
fake_8767918450885626
result, different first party:
fake_5325946132694166,
fake_5190025052745917,
fake_5339969709731691,
fake_7212361744326825,
fake_7048429959857687
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_06268417794186942,
fake_8757999566519232,
fake_3557494888587316,
fake_6081905254337909,
fake_31510149746194505
result, different first party:
fake_06268417794186942,
fake_8757999566519232,
fake_3557494888587316,
fake_6081905254337909,
fake_31510149746194505
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_3715841637268249,
fake_7802290166538057,
fake_07665837134195486,
fake_9311805857484488,
fake_4224313435032485
result, different first party:
fake_3715841637268249,
fake_7802290166538057,
fake_07665837134195486,
fake_9311805857484488,
fake_4224313435032485
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_3981930526013102,
fake_8667322627783183,
fake_688505269026876,
fake_7725799262935285,
fake_927940215296037
result, different first party:
fake_3981930526013102,
fake_8667322627783183,
fake_688505269026876,
fake_7725799262935285,
fake_927940215296037
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_5866442098674756,
fake_5178672443478158,
fake_8931224283441679,
fake_9619407543360294,
fake_568240920180038
result, different first party:
fake_774411168186375,
fake_016524197985908762,
fake_4169416024639958,
fake_9187865577869356,
fake_005146706480580354
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_8655718169341546,
fake_9301159966410584,
fake_9007770700113868,
fake_8363884584401975,
fake_1178809621064838
result, different first party:
fake_9678511670125483,
fake_7464827232352351,
fake_8177509352675849,
fake_6142240872430116,
fake_6497452043436762
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_5601454675593933,
fake_6925752036622186,
fake_4636587219241428,
fake_982817759639464,
fake_5098481324650919
result, different first party:
fake_5601454675593933,
fake_6925752036622186,
fake_4636587219241428,
fake_982817759639464,
fake_5098481324650919
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_668607707705521,
fake_9233447928749783,
fake_7733828228344823,
fake_17328852430303332,
fake_381370643100837
result, different first party:
fake_668607707705521,
fake_9233447928749783,
fake_7733828228344823,
fake_17328852430303332,
fake_381370643100837
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_8786795708214239,
fake_8435185377986882,
fake_776012258780779,
fake_45373659488574636,
fake_3747928580348925
result, different first party:
fake_6441725857564973,
fake_9664181221623884,
fake_831770554143545,
fake_34019314277745116,
fake_9922938590479973
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_28558192463834553,
fake_04991392089703872,
fake_8304421718002639,
fake_8784717904251025,
fake_05382527576854956
result, different first party:
fake_28558192463834553,
fake_04991392089703872,
fake_8304421718002639,
fake_8784717904251025,
fake_05382527576854956
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same first party:
fake_24997222337353997,
fake_8790493525266958,
fake_7985658948262031,
fake_4674771269275533,
fake_0006243892494302017
result, different first party:
fake_24997222337353997,
fake_8790493525266958,
fake_7985658948262031,
fake_4674771269275533,
fake_0006243892494302017
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
favicon cache
A favicon is an icon that represents a website, typically shown in browser tab and bookmarks menu. If the favicon cache is not partitioned, it can be used to track users across websites. |
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different first party:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different first party:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
fetch cache
When a resource is received via the Fetch API, it is frequently cached. That cache can potentially be abused for cross-site tracking. |
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
font cache
Web fonts are sometimes stored in their own cache, which is vulnerable to being abused for cross-site tracking. |
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
getDirectory
navigator.storage.getDirectory exposes a location for storing files to web content. In some cases, these files may be shared across tabs. |
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8,
f26a2183-950a-4683-b904-12aeb1d2072b,
bedd0c39-a154-4a8f-a181-961237dc6685,
4e199ab4-ae9e-4536-b1e3-91ae791626bb,
26593216-615b-49e5-9d37-3337d7d766e6
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
087bbd18-2f31-44a2-bed8-d69a42f4931f,
09debfcd-ca11-4515-90d0-0d65d9e59f9d,
a516b344-3178-425e-a92c-fd669b2ab46d,
490a9f95-0ed2-404e-909f-0c385f812351
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
result, different first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193,
b057a3e1-eabe-4063-8914-511e904b99f5,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
54e87806-0159-46ee-aba8-9a081565e4e3,
a41840c1-87b9-4c43-9c09-162379992b41
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb,
899c1527-1c38-46be-a86e-41e668b85dd9,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e,
2f39d051-52c6-40a7-8461-157def5df61b,
2d007624-62c1-440b-95e9-ddbde79d9272
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
91e60022-64f5-4b47-8d0a-65e68a26fb32,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
9d09a8a3-2165-4558-9dc0-76a995659c40,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
3fd13172-3a7c-450f-b720-d6726ff02716,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt', { create: true });
const stream = await fileHandle.createWritable();
await stream.write(secret);
await stream.close();
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
try {
const root = await navigator.storage.getDirectory();
const fileHandle = await root.getFileHandle('secret.txt');
const file = await fileHandle.getFile();
return file.text();
} catch (e) {
throw new Error('Unsupported');
}
}
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
db892d3d-9567-46ff-89ee-7cdbc3e2d282
result, different first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
H1 connection
HTTP/1.x are the classic web connection protocols. If these connections are re-used across websites, they can be used to track users. |
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8,
f26a2183-950a-4683-b904-12aeb1d2072b,
bedd0c39-a154-4a8f-a181-961237dc6685,
4e199ab4-ae9e-4536-b1e3-91ae791626bb,
26593216-615b-49e5-9d37-3337d7d766e6
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
087bbd18-2f31-44a2-bed8-d69a42f4931f,
09debfcd-ca11-4515-90d0-0d65d9e59f9d,
a516b344-3178-425e-a92c-fd669b2ab46d,
490a9f95-0ed2-404e-909f-0c385f812351
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
result, different first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193,
b057a3e1-eabe-4063-8914-511e904b99f5,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
54e87806-0159-46ee-aba8-9a081565e4e3,
a41840c1-87b9-4c43-9c09-162379992b41
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb,
899c1527-1c38-46be-a86e-41e668b85dd9,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e,
2f39d051-52c6-40a7-8461-157def5df61b,
2d007624-62c1-440b-95e9-ddbde79d9272
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d,
dac26500-75b6-440b-bd39-c5a4cb45b8cb,
42bed404-de0d-4d53-b99c-9957a5d84935,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
91e60022-64f5-4b47-8d0a-65e68a26fb32,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
9d09a8a3-2165-4558-9dc0-76a995659c40,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
result, different first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c,
70c18ec0-55ec-49cb-aa52-4be50e504999,
ef22704d-27b8-4d98-bf39-01993ccca959,
9f1a6433-6013-4220-8d99-020f165e1ea3
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
3fd13172-3a7c-450f-b720-d6726ff02716,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h1.privacytests2.org:8901/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h1.privacytests2.org:8901/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
db892d3d-9567-46ff-89ee-7cdbc3e2d282
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
H2 connection
HTTP/2 is a web connection protocol introduced in 2015. Some browsers re-use HTTP/2 connections across websites and can thus be used to track users. |
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8,
f26a2183-950a-4683-b904-12aeb1d2072b,
bedd0c39-a154-4a8f-a181-961237dc6685,
4e199ab4-ae9e-4536-b1e3-91ae791626bb,
26593216-615b-49e5-9d37-3337d7d766e6
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
087bbd18-2f31-44a2-bed8-d69a42f4931f,
09debfcd-ca11-4515-90d0-0d65d9e59f9d,
a516b344-3178-425e-a92c-fd669b2ab46d,
490a9f95-0ed2-404e-909f-0c385f812351
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
result, different first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193,
b057a3e1-eabe-4063-8914-511e904b99f5,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
54e87806-0159-46ee-aba8-9a081565e4e3,
a41840c1-87b9-4c43-9c09-162379992b41
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb,
899c1527-1c38-46be-a86e-41e668b85dd9,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e,
2f39d051-52c6-40a7-8461-157def5df61b,
2d007624-62c1-440b-95e9-ddbde79d9272
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d,
dac26500-75b6-440b-bd39-c5a4cb45b8cb,
42bed404-de0d-4d53-b99c-9957a5d84935,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
91e60022-64f5-4b47-8d0a-65e68a26fb32,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
9d09a8a3-2165-4558-9dc0-76a995659c40,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
result, different first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c,
70c18ec0-55ec-49cb-aa52-4be50e504999,
ef22704d-27b8-4d98-bf39-01993ccca959,
9f1a6433-6013-4220-8d99-020f165e1ea3
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
3fd13172-3a7c-450f-b720-d6726ff02716,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
await fetch(`https://h2.privacytests2.org:8902/?mode=write&secret=${secret}`, { cache: 'no-store' });
}
read: async () => {
const response = await fetch('https://h2.privacytests2.org:8902/?mode=read', { cache: 'no-store' });
return await response.text();
}
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
db892d3d-9567-46ff-89ee-7cdbc3e2d282
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
H3 connection
HTTP/3 is a new standard HTTP connection protocol, still in draft but widely supported by browsers. If it is not partitioned, it can be used to track users across websites. |
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
4ffb16dfa4a043be39f9134b532ba346,
023bffefd326fb4537adeca6137a1580,
9186a90cbdd79483e0690856f629b082,
c99f511ee228621c5568b99526d6b2ee,
1e9f8f09e28d69667ae7718e5e3718f8
result, different first party: , 091b7c3d471b2e9bca4e2e3d1aa82cd3, 40c42ce2ee4cdf59178ce75fa09915db, 0237bc0b0ffb302be0cbbe30be92c215, f014fa70d515a3017bfd580346b4d343
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
0ab1d0dc1ee305087bc46a7922ee9099,
bdf20de90a4a4160e22cf6211a2bfa30,
5fa643e836b66712fb67bb2566a0748a,
7770bdc6496ba6e29cb0de7987d8ab9c,
fdf7f90e097337fd77728f6c373b6a4f
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
4cd915b1df0ed0160549d8364e38b26c,
c12fc7ed5ed63cd45b839a3b24d82e8e,
3397e000836ab9dec39c4e6fdf9b8768,
1a44c5e01ce8ac8c9180956821544ef8,
4a621f8f8308af922ba269cb9a6f94e4
result, different first party:
4cd915b1df0ed0160549d8364e38b26c,
c12fc7ed5ed63cd45b839a3b24d82e8e,
3397e000836ab9dec39c4e6fdf9b8768,
1a44c5e01ce8ac8c9180956821544ef8,
4a621f8f8308af922ba269cb9a6f94e4
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
9feac5c615955ff386566c51d10ff0f5,
131f3a30256c0481efd2c02b00bf49fd,
c13a3ea16a9718df93974dd06302beac,
2f5f2e2eb0ed81d8119868e79b9ba56d,
e6d2c89802f6ad8aae3c0da3195e1391
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
2dfa44d2cfa4e95d8708da5f28100a95,
dbe4940886e59978b492875e1d6ff24a,
4ed7c55c8e8bf11452b1c60cff283ce3,
d960c95dd554d9bb24238dfcc0cb54af,
51e156924094177d070c88e1ab0aa760
result, different first party: , 38c7781ec1e595b3023102ecfff8cc7a, ccdda56c898aa30db8eee9c2dadfc9f1, 4377819c56a7df4eaf8afa5e101c01cc, d58c8bba8e1a94378f9ba96fdfa7090f
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
e1a0e3ff3b97ac05f084e1ba5b20b4c0,
ab7afb9989e89d3bf1dbfcb3f8d45776,
83303f17c93507c54ed15155b054068f,
80e43445c4281072a0c1c4beb7e7c06c,
7e5bb2970f0fd310f9f0c2628c1a8809
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
ace5f997e17df1fa4527592a8c72042e,
ddaaabfaddcf4301eafb366e21a3a6b2,
5c31f0be1727c35b787c2360bb0d2788,
9b01e9236867bafe72a99628dfa1d248,
2ef2335c11f1fb29433cc6aca4610230
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party: , , , ,
result, different first party: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party: , , , ,
result, different first party: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
85cbad3ee24a8eefbac61df42d8f842b,
ab99cc44cbcd5749d429a838cde4a9c4,
5b2cd1f1ac199e511cb6273da1a709ed,
ef071a690d4c6f802874d58c91b06cb8,
87fe5260c36b72e7cfad2e581dedede6
result, different first party: , 9e400c3508fa7e402b782bd208dd6174, e4f5780b3b4732f1003fab8f7415c5cf, 366af1d87c23deb71f9a2cbae565490b, 3c6c1b9c5bfad66d98f27ad81bd92001
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Ensure that we can switch over to h3 via alt-svc:
for (let i = 0; i < 3; ++i) {
await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
await sleepMs(500);
}
// Are we now connecting over h3?
const response = await fetch('https://h3.privacytests2.org:4434/connection_id', { cache: 'no-store' });
const text = await response.text();
// Empty response text indicates we are not connecting over h3:
if (text.trim() === '') {
throw new Error('Unsupported');
}
}
read: async () => {
const response = await fetch('https://h3.privacytests2.org:4434/connection_id');
return await response.text();
}
result, same first party:
bb4973489d43f10c885a8fccf80b0c54,
b567e35d6410336a1cc99750f56be75a,
06111506255aedc14acadcb1d608b8ed,
9381246fba050a0632a6c0c4a0fb4a10,
83d4af60dc13b14db778e33df46718f1
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
HSTS cache
The HTTP Strict-Transport-Security response header allows a website to signal that it should only be accessed via HTTPS. The browser remembers this directive in a database, but if this database is not partitioned, then it can be used to track users across websites." |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Used http, Used http, Used http, Used http, Used http unsupported: false, false, false, false, false passed: true, true, true, true, true test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Used http, Used http, Used http, Used http, Used http unsupported: false, false, false, false, false passed: true, true, true, true, true test failed: false, false, false, false, false |
write: null read: null result, same first party: , , , , result, different first party: HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected unsupported: , , , , passed: true, true, true, true, true test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: null read: null result, same first party: , , , , result, different first party: HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected unsupported: , , , , passed: true, true, true, true, true test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
|
HSTS cache (fetch)
The HTTP Strict-Transport-Security response header allows a website to signal that it should only be accessed via HTTPS. The browser remembers this directive in a database, but if this database is not partitioned, then it can be used to track users across websites." |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Used http, Used http, Used http, Used http, Used http unsupported: false, false, false, false, false passed: true, true, true, true, true test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Used http, Used http, Used http, Used http, Used http unsupported: false, false, false, false, false passed: true, true, true, true, true test failed: false, false, false, false, false |
write: null read: null result, same first party: , , , , result, different first party: HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected unsupported: , , , , passed: true, true, true, true, true test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: null read: null result, same first party: , , , , result, different first party: HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected, HTTPS used by default; no HSTS cache issue expected unsupported: , , , , passed: true, true, true, true, true test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
write: set HSTS flag read: read HSTS flag result, same first party: not tested, not tested, not tested, not tested, not tested result, different first party: Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https, Upgraded to https unsupported: false, false, false, false, false passed: false, false, false, false, false test failed: false, false, false, false, false |
|
iframe cache
An iframe is an element in a web page than allows websites to embed a second web page. Caching of this web page could be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
image cache
Caching of images in web browsers is a standard behavior. But if that cache leaks between websites, it can be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
indexedDB
The IndexedDB API exposes a transactional database to web pages. That database can be used to track users across websites, unless it is partitioned. |
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8,
f26a2183-950a-4683-b904-12aeb1d2072b,
bedd0c39-a154-4a8f-a181-961237dc6685,
4e199ab4-ae9e-4536-b1e3-91ae791626bb,
26593216-615b-49e5-9d37-3337d7d766e6
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
087bbd18-2f31-44a2-bed8-d69a42f4931f,
09debfcd-ca11-4515-90d0-0d65d9e59f9d,
a516b344-3178-425e-a92c-fd669b2ab46d,
490a9f95-0ed2-404e-909f-0c385f812351
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
result, different first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193,
b057a3e1-eabe-4063-8914-511e904b99f5,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
54e87806-0159-46ee-aba8-9a081565e4e3,
a41840c1-87b9-4c43-9c09-162379992b41
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb,
899c1527-1c38-46be-a86e-41e668b85dd9,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e,
2f39d051-52c6-40a7-8461-157def5df61b,
2d007624-62c1-440b-95e9-ddbde79d9272
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d,
dac26500-75b6-440b-bd39-c5a4cb45b8cb,
42bed404-de0d-4d53-b99c-9957a5d84935,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
91e60022-64f5-4b47-8d0a-65e68a26fb32,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
9d09a8a3-2165-4558-9dc0-76a995659c40,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c,
70c18ec0-55ec-49cb-aa52-4be50e504999,
ef22704d-27b8-4d98-bf39-01993ccca959,
9f1a6433-6013-4220-8d99-020f165e1ea3
result, different first party:
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
3fd13172-3a7c-450f-b720-d6726ff02716,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
db892d3d-9567-46ff-89ee-7cdbc3e2d282
result, different first party: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
localStorage
The localStorage API gives websites access to a key-value database that will remain available across visits. If the localStorage API is not partitioned or blocked, it can also be used to track users across websites. |
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8,
f26a2183-950a-4683-b904-12aeb1d2072b,
bedd0c39-a154-4a8f-a181-961237dc6685,
4e199ab4-ae9e-4536-b1e3-91ae791626bb,
26593216-615b-49e5-9d37-3337d7d766e6
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
087bbd18-2f31-44a2-bed8-d69a42f4931f,
09debfcd-ca11-4515-90d0-0d65d9e59f9d,
a516b344-3178-425e-a92c-fd669b2ab46d,
490a9f95-0ed2-404e-909f-0c385f812351
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
result, different first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193,
b057a3e1-eabe-4063-8914-511e904b99f5,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
54e87806-0159-46ee-aba8-9a081565e4e3,
a41840c1-87b9-4c43-9c09-162379992b41
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb,
899c1527-1c38-46be-a86e-41e668b85dd9,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e,
2f39d051-52c6-40a7-8461-157def5df61b,
2d007624-62c1-440b-95e9-ddbde79d9272
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d,
dac26500-75b6-440b-bd39-c5a4cb45b8cb,
42bed404-de0d-4d53-b99c-9957a5d84935,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
91e60022-64f5-4b47-8d0a-65e68a26fb32,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
9d09a8a3-2165-4558-9dc0-76a995659c40,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c,
70c18ec0-55ec-49cb-aa52-4be50e504999,
ef22704d-27b8-4d98-bf39-01993ccca959,
9f1a6433-6013-4220-8d99-020f165e1ea3
result, different first party:
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
3fd13172-3a7c-450f-b720-d6726ff02716,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
db892d3d-9567-46ff-89ee-7cdbc3e2d282
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
locks
navigator.locks (only supported in some browsers) allows scripts on multiple tabs to coordinate. If this API is not partitioned, it can be used for cross-site tracking. |
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
result, different first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
result, different first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
result, different first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
result, different first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined
result, different first party:
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined
result, different first party:
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
result, different first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
result, different first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined,
Error: can't access property "name",
queryResult.held[0] is undefined
result, different first party:
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context,
Error: LockManager.query: query() is not allowed in this context
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
result, different first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (key) => {
if (navigator.locks) {
navigator.locks.request(key, lock => new Promise((resolve) => {}));
const queryResult = await navigator.locks.query();
return queryResult.held[0].clientId;
} else {
throw new Error('Unsupported');
}
}
read: async () => {
if (navigator.locks) {
const queryResult = await navigator.locks.query();
return queryResult.held[0].name;
}
}
result, same first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
result, different first party:
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name'),
Error: Cannot read properties of undefined (reading 'name')
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
|
prefetch cache
A <link rel='prefetch'...> suggests to browsers they should fetch a resource ahead of time and cache it. But if browsers don't partition this cache, it can be used to track users across websites. |
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different first party:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
script cache
Caching of scripts in web browsers is a standard behavior. But if that cache leaks between websites, it can be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
SharedWorker
The SharedWorker API allows scripts from multiple tabs to share a background thread of computation. If SharedWorker is not partitioned, then it can be abused to shared data between websites in your browser. |
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: none, none, none, none, none
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: none, none, none, none, none
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor
result, different first party:
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: none, none, none, none, none
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: none, none, none, none, none
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: none, none, none, none, none
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: none, none, none, none, none
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor
result, different first party:
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor,
Error: window.SharedWorker is not a constructor
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: no SharedWorker message received,
Error: no SharedWorker message received,
Error: no SharedWorker message received,
Error: no SharedWorker message received,
Error: no SharedWorker message received
result, different first party:
Error: SharedWorker constructor: StorageAccess denied.,
Error: SharedWorker constructor: StorageAccess denied.,
Error: SharedWorker constructor: StorageAccess denied.,
Error: SharedWorker constructor: StorageAccess denied.,
Error: SharedWorker constructor: StorageAccess denied.
unsupported: false, false, false, false, false
passed: undefined
test failed: true, true, true, true, true
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: none, none, none, none, none
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
// console.log("worker", worker);
const messagePromise = new Promise((resolve) => {
worker.port.onmessage = (e) => resolve(e.data);
});
worker.port.postMessage(secret);
await messagePromise;
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const worker = new window.SharedWorker('supercookies_sharedworker.js');
worker.port.start();
const messagePromise = new Promise((resolve, reject) => {
worker.port.onmessage = (e) => resolve(e.data);
setTimeout(() => reject(new Error('no SharedWorker message received')), 200);
});
worker.port.postMessage('request');
const message = await messagePromise;
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same' && message === 'none') {
throw new Error('Unsupported');
}
return message;
}
result, same first party:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
result, different first party: none, none, none, none, none
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
|
TLS Session ID
The TLS protocol is used by HTTPS to make connections secure. If the browser were to re-use a TLS session, then the session ID could be used to track users across websites. |
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
b0a204199d214070fd45b740f3cccd50da92a06e97f408fe1d8982ee8c1d5c01,
7c2179a60226628bfb9205dc42423061b7aa353135ae441e342c54eb54f8a9c6,
9a8807c7a81a5f800d3576b9f6d7069d5d9a36f97c1b8150ef26d7f0da727895,
54cb9088fbbcd7eb3c7de4525f50980e3430286e6b0014f1ed6f227f30185a89,
860eff03f58bc137f258cd92a32bb6cc3c282ec3e70c4e665c8678bf54b5ffca
result, different first party:
dde73c9e2fce3195d567193ba13fab276ad5dc27ee4de471486c8bd22d20680a,
42f211f3b03e7fa5f118fce539f8cac9c43ca47efe7652af5a698bc6484bc736,
c41b621c4d97f729ef80d1ece081289a2307a3f07a68f1b34ff83faa6d6f4bbf,
ff277d3d2b165480a01c3e2a6b8b5dc4888e8062debbea5296e7171724d6dae0,
7fe88a28d1b78d59ab264da342ca7e0301b112c92ab39e862f7854b373b7d19f
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
17d00feae18879dbd00d87a4ee1e780c454c8189eb2ec335cb14f4394e6061f2,
ffd7b7f2bfa4bb48b6fc6109c501d9998935855b54f8ef66848ae9d7a3d917df,
410a8f6bc6f4d61950858bae2d116c8a7747c2b272cf3ea9b072fe45a14dc447,
d005d4971448ad3b0ae13b7b1df3c97a6574a51f1741bf3480a61629ac203e8f,
2d6ffd6d3b207e8949b77350cbb90c0b3000685fe6c6cdaaa5b067c9f531f5b3
result, different first party:
c4b4cca5d852fe6ad62662149dc89d061821a899af19eacbb11785e755ef1e54,
bcc0dd7e794fec2da8a12b817f97c996d88a0ecc4f84ed7ca8eef5b0699bc52a,
5109be0e929e01a8e6ef285cbe555453b3c563508d1d11eba7b5d3cb4244b63e,
b358c3df12bbf1007629d76d85390ee16ed830ec94df0e9fa38d058e462248f4,
28ddb574c011050fc7380cb23a26881a27ca6c091c966b436ecfa32b3b1f302e
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
c002309732db1536a7592c78d27c39cce1acd5d77df5ede8e1618175190c4e8d,
bb822070c1ea768a6bbf35b5bca9b62eeb8fcc7bb000d11af0f034820d3dbbb6,
75c2fac26ab85c1d933a810643d7ce4538b6befad2a555edd71f9fef7ed035ca,
b8404ffc2c4bdf25380a7f78591004725f8d163d9ffa31efedfd998dee301cbf,
8bfec9a07c11c75c799c0004d458061dcf9e3d1a1785542101ea249be8f0012c
result, different first party:
74c2e026476672fc2df2087b0d572857b9bc1e636b2a3f80d2e5a61e71134db7,
476e4d13e9e9814e3c4d63750af89835efbc1bfd298e1b31cb9178601a08ada1,
7c74c43f59147eb67831720c1683db979f7b3c04acc1fefe8718895aadc9a551,
c8ace30a6dc549936d5e8409eb3093b76177e576ede98807e8436d3094467094,
c67f3b10b8ac679ecffc87ea5a8260a9444478ce5d21cc6e705ee6a230e89ad6
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
ff68b87974b65b476d943a2ef9f73bc3159bc4adfce6405ed0a73f78869101e7,
8c0b3d1e89ae11591df7925131623863f377a2029afc5f487624ff77e8227da2,
4bf2660b8d74df7d89d4d8116220dc347ab7c6722cb4ef5f2e67c6bab4f3fc20,
4b56d99cf3215ab23e2aa307bf139d5f236772fc4df4c8e114a9e87635fe2296,
fcdef4a731b143aec018a0bcd39a59658827aa729dd47a6627c46d9df4493b6f
result, different first party:
9cc5f7ef0e58c51d25a201fb070042d98322be6d8b01a3e5d64e3c4507ae52a2,
f57c35a25748fd976e26c7fbbc1009232d7b0ee06fdea7cb2e3bbee210d9d072,
a09790297c340c4a63c323611f3772f26f5dfb43648401f4c21e2afb80ec6f06,
8d7a87f982c24887f1591f341450dd070d819ff270066c8a1bea9d5252979ee8,
99b8b6c8d8154ea4115c823bc2217d0cb2253b2a7cbbcab0cc4c0434595a1248
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
8f16cf53a992f5f8cbf7624118108473ac415a3413d0191cad85d4c93afde94a,
4074624461890c7fb6e4afa8ca7c2d4e3eeb2167935a0cb08fe4a6912ba5e2f4,
6497397e6f55d5a76b328b93ef9368accc6194e8676428bca8294e9bebfa3f25,
af6c12da7d9981e9e11369392b5f76fd65f203b7cf1fc32519171e6044d95a34,
34128e8513d1e2b8c51a96e073334dee5888f71637d0dc8638144a9ad6705203
result, different first party:
747131dadc1f9289aec3bcd7c92ff3e93e8365458e519b8020e8bfd87fb76551,
105fe78f5fb6c013ed7f5b78acdb02e9083283b79fc321abe9be66f816463619,
2d5a0119f62edc1121b671d1d2cbd825494bcf44a0d4d099c7325dff8eee23ca,
b9a979efea5cad6f52a79fca2267c515ee3d69de0882452a765130a5f73d1509,
6435fc133b3745c2a0d79f6312dc279ebe435a24cd393c5087fb1976b7986622
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
fe3e187242c448e817a0791c9f5546c64e297c213b666e214d8c8219544048ac,
86677d362db7d56eee78d3675f8c0812204180aff663de761227d78ae66b6ab0,
14c750c02bdb4f58c02bc44136b5df7a909306bbd738194f608d434c9a096bcf,
166342f51fd1547f6569d1e85993522635276abf5d29f4f9366ef301a48dcbe1,
d2d944507d7572d8d45d318106c298af10020ef22a02eb4d78947f98302a0d87
result, different first party:
65a651a25cc00b054bc5de9a20a1fc0857a9bc02b0d5e8c0c899b9237dd409d5,
67e63e9e44ff00968a30bc10b18a54fc719bd20ceec29ffc06e911face30f3da,
501db9917ddb7a87150d7bbe820a3f595e115ec1ebc3b58c13bff717030e5bf1,
273233f5b37a04c9fd4e8d8e3b6cda61aeac42883f9139bd4e1b3be6279fa8e0,
b1c7e441232eeaa437d1c045a44e65c0e3c141f36af9f2cf3b4856ebd13441f9
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
6163e39294a65d60a8feb3d2e67c18a710d68436959ffa046270e4e2f1486f5e,
5c9fe71a3a684928b4046afb2c5cdefd0cd6e67a7291ac412d90f1bf4126790e,
2a16f6cea60d13112cec9f7d15da9d26c59dd24e7e3d78ec2e39cc4473ba2089,
caf2b90dc90695484d49e25c05849de41b8d4478cc2e6980dba08c6c0706088d,
9c409ef4992b0d032f75275ee54d46ed7bb964174b50d36e679e137117a5bc67
result, different first party:
9e42786a9c8535e710e3b5b6dc9bc0bcc5a7fd7675605890b6a41ac1213cee74,
3997f7ec4e051cc8e5162e281b32c1ad2c98fffdb40c9c5c7479fa91147d3b78,
caab3832f44f3c22f323ad2de0ce376d814ea56643c0377d0c3360d17c292eea,
6af05ec3aa9586dc009752760f034a1ca07984169b61776c59656371794a8851,
56ac267838da72b2703ea4b997a2b293725b839d49ebf144f6bc3fd9a4a4422e
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
4922a0cf1ab163d388995f4fff6122b2597c54c25d1d20a588f2df35a37d6112,
91b7e95a7ee69ff6cb727f4db16e36b451c5e607fc6c9294e1387118a8be669a,
c5df8ea7278779ccd24be98c9703923fbc3a3041e7067bc9f75ec1862e093931,
f83f284633b789478fc645e74a4daac2a2748eec2f29793c7024c3de138c9ace,
c6c8180505c75dd3d9dcbcd0b7671d3e6a39d112304dd9b014a19f4b07d1e1bd
result, different first party:
8ddbc82ef061262faae37e64fc402423066e1dc28e94466a8adba7f0e47be231,
f1fc24373ffce73f1a95c63a9d65a6dcf570f8bcf265b550280931b4af11809d,
7edf5bf28ffdd3f1089101ed23980e53b05f4f052d804995dee25188974fb585,
6fe82d527937d86b5884712f3f85472de4ff52a1423d1339dd5f5b361be8b45b,
96d1b199af98142ab1cb179e950aef556d04277425b259f8a0c9df2a429f61d9
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
0afb53ba301d9f7af5122f148ab1a6e07a6695098806166b451cb95d09da5e24,
424ffe37111e2007f06370fe88d6febd1186b7aee2caf5b7fb6afa7ccc875b82,
dcb23924435ff64220a18307fdf378612af6caace5695b4ca233716a669e6a2c,
690fee2013c276a27fbad7f412e5ec4f2c6b3da5397e4148985b70a3eeeaf0c9,
87052dd0cce4562158ea1ba507d371c008bf9be919db7e46d0109b86eb37c8d0
result, different first party:
87bf48bdf576f882bae3cf4be5aa9996dc18b88a154218ff14db761f82ac7bde,
08807669706c25707a13dab0f6f7a4b55b2801b251a8ded8b6c222b0074585e2,
8eb13a6608e227ea7a2f2f33c57e0f1d0240bf99b6fe7ce5570c6196ecc7d93f,
13dd0c1628721cf52e78685f34632814417fff082b3e09d4f2cc0fbd07b2f16b,
70c06130f5994c35adb080a1ea9e669848db9cc53a9edcc77d1b5cd165fd22d5
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
e6671a0c77bcb53b780241d58751436981496ed84f09a8513446d6c652ee827a,
0d6d93e83b55f2969ec7c5529ca3f9cdce4b2695e7969a22fb85addad692f2c7,
7c269a996f7847deb654778b87b00dc459c722e19d5aadc4c1fd1821461a5807,
b670d7b7fcbe5833628d92a7d0b843ea73b2c794290ff355f361ac557a1d1eaa,
b7dd76efc2775dc5901762ec3d86151dccd618c901350d75632f29a047d90b8f
result, different first party:
f2dda8537103108a1593863a1fd578be121cef6ebb886e650f3fd3b6d74c0a2a,
ce89b910fab9d1bc484960cdb04166d93cabad7c8b6800aad54f3c6a9c3b4f92,
b1c8f3e56ed541cfa80cd6d9ef78576f350a4f231899d6f0dd676f5df19c78f3,
4f531489fa68fc46f6feb08290dd7fed90f49c16a5c844a20ef19660874a3c6e,
e76c01cadd95d13a79d49bb366779b2ac69b164ffcd7de461ed37725dbfcfe67
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
read: async () => {
const results = await fetch('https://tls.privacytests2.org:8900/');
return (await results.json()).sessionId;
}
result, same first party:
d45c7019f0e88fe9cfa6ba192d6d055b72419eb4cc6854a1f492bef5ac62293f,
38ef50b8c640d4795dabe5f13fb28ec1a61cb646bcbc7965863704f3af092f4b,
e243908df69c46502887ff305784b314dfc672ef69a800fe2fda1fede75de2b6,
69cd94c196776f038ffbb5a992046794cd3de2e46f974696aca65d3bcb4ad70f,
7b360a4eb5074dac0aef935abbb111bee688fdfbcb5128b16cd1df583a24cccb
result, different first party:
71301df601433bf349a0c66edd6e80084075ea3d39d53eb75647fade0c261fb0,
5583e53abe2a392b5d2960e6ecd376761723be4ff0920724b57b3fb1fc56b16d,
8156496e9dd6ea7c68d06b6d404a4e71f23b0c64a020550b2b399b6334cbb709,
cfbcc678434deb46a7d17e2e84ad57d8fb8760473312f6369d176b3346608816,
a9df1c61d155ae8cc1a954371c65de343b2610bad45cd72b7bc36df60c99f9de
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
XMLHttpRequest cache
Similar to the newer Fetch API, any resource received may be cached by the browser. The cache is potentially vulnerable to cross-site tracking attack. |
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same first party: 1, 1, 1, 1, 1
result, different first party: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
Navigation testsWhich browsers prevent websites from sharing tracking data when you click on a link?
When you click a hyperlink to navigate your browser from one site to another, certain browser APIs allow the first site to communicate to the second site. These privacy vulnerabilities can be fixed by introducing new limits on how much data is transfered between sites.', |
|||||||||||
|
document.referrer
The Referer [sic] request header is a mechanism used by browsers to let a website know where the user is visiting from. This header is inherently tracking users across websites. In recent times, browsers have switched to a policy of trimming a referrer to convey less tracking information, but Referer continues to convey cross-site tracking data by default. |
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { /* do nothing */ }
read: () => document.referrer
result, same first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
result, different first party:
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/,
https://test-pages.privacytests2.org/
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
sessionStorage
The sessionStorage API is similar to the localStorage API, but it does not persist across tabs or across browser sessions. Nonetheless, it can be used to track users if they navigate from one website to another. This tracking can be thwarted by partitioning sessionStorage between websites. |
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
ef23c895-aa0f-4990-99ad-a02c380a34a8,
f26a2183-950a-4683-b904-12aeb1d2072b,
bedd0c39-a154-4a8f-a181-961237dc6685,
4e199ab4-ae9e-4536-b1e3-91ae791626bb,
26593216-615b-49e5-9d37-3337d7d766e6
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
087bbd18-2f31-44a2-bed8-d69a42f4931f,
09debfcd-ca11-4515-90d0-0d65d9e59f9d,
a516b344-3178-425e-a92c-fd669b2ab46d,
490a9f95-0ed2-404e-909f-0c385f812351
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
result, different first party:
4d540502-95f7-4a21-aaa9-c7abf4b08f10,
f2720e51-3a8e-473b-9462-1b8c9f860da0,
42cf2819-9196-4304-adf1-2b9b02c7a5ba,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
bca8a7d1-b41b-4bbd-b644-122c50f8b193,
b057a3e1-eabe-4063-8914-511e904b99f5,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
54e87806-0159-46ee-aba8-9a081565e4e3,
a41840c1-87b9-4c43-9c09-162379992b41
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
080ab8f4-68bc-4c15-818f-f5a371a82beb,
899c1527-1c38-46be-a86e-41e668b85dd9,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e,
2f39d051-52c6-40a7-8461-157def5df61b,
2d007624-62c1-440b-95e9-ddbde79d9272
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d,
dac26500-75b6-440b-bd39-c5a4cb45b8cb,
42bed404-de0d-4d53-b99c-9957a5d84935,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
91e60022-64f5-4b47-8d0a-65e68a26fb32,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
9d09a8a3-2165-4558-9dc0-76a995659c40,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
b190732b-a22e-40a5-bfb0-dd59b6b1a451,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
3bd7615a-3c77-45fc-9885-e4323b5fb346,
4cfede65-6a61-41c5-9886-5955cceade7a,
3730f2bc-98c5-4fdd-ad6a-8779db336886
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
daaff160-c085-45d0-bd32-043b84c8b1f5,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c,
70c18ec0-55ec-49cb-aa52-4be50e504999,
ef22704d-27b8-4d98-bf39-01993ccca959,
9f1a6433-6013-4220-8d99-020f165e1ea3
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
3fd13172-3a7c-450f-b720-d6726ff02716,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => window.sessionStorage.setItem('secret', secret)
read: () => window.sessionStorage.getItem('secret')
result, same first party:
d565e489-86bc-4b04-9426-0180c2460d3e,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
db892d3d-9567-46ff-89ee-7cdbc3e2d282
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
window.name
The window.name API allows websites to store data that will persist after the user has navigated the tab to a different website. This mechanism could be partitioned so that data is not allowed to persist between websites. |
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_ef23c895-aa0f-4990-99ad-a02c380a34a8,
name_f26a2183-950a-4683-b904-12aeb1d2072b,
name_bedd0c39-a154-4a8f-a181-961237dc6685,
name_4e199ab4-ae9e-4536-b1e3-91ae791626bb,
name_26593216-615b-49e5-9d37-3337d7d766e6
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
name_087bbd18-2f31-44a2-bed8-d69a42f4931f,
name_09debfcd-ca11-4515-90d0-0d65d9e59f9d,
name_a516b344-3178-425e-a92c-fd669b2ab46d,
name_490a9f95-0ed2-404e-909f-0c385f812351
result, different first party:
name_3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d,
name_087bbd18-2f31-44a2-bed8-d69a42f4931f,
name_09debfcd-ca11-4515-90d0-0d65d9e59f9d,
name_a516b344-3178-425e-a92c-fd669b2ab46d,
name_490a9f95-0ed2-404e-909f-0c385f812351
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_4d540502-95f7-4a21-aaa9-c7abf4b08f10,
name_f2720e51-3a8e-473b-9462-1b8c9f860da0,
name_42cf2819-9196-4304-adf1-2b9b02c7a5ba,
name_ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
name_87ef5082-2c9c-46b3-9e53-c5a8ddf06728
result, different first party:
name_4d540502-95f7-4a21-aaa9-c7abf4b08f10,
name_f2720e51-3a8e-473b-9462-1b8c9f860da0,
name_42cf2819-9196-4304-adf1-2b9b02c7a5ba,
name_ccb86c92-abef-4cc9-8928-1d2ae1335fe9,
name_87ef5082-2c9c-46b3-9e53-c5a8ddf06728
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_bca8a7d1-b41b-4bbd-b644-122c50f8b193,
name_b057a3e1-eabe-4063-8914-511e904b99f5,
name_3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
name_54e87806-0159-46ee-aba8-9a081565e4e3,
name_a41840c1-87b9-4c43-9c09-162379992b41
result, different first party:
name_bca8a7d1-b41b-4bbd-b644-122c50f8b193,
name_b057a3e1-eabe-4063-8914-511e904b99f5,
name_3c68bebd-f3e2-46ce-b2b5-09793a725c3a,
name_54e87806-0159-46ee-aba8-9a081565e4e3,
name_a41840c1-87b9-4c43-9c09-162379992b41
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_080ab8f4-68bc-4c15-818f-f5a371a82beb,
name_899c1527-1c38-46be-a86e-41e668b85dd9,
name_a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e,
name_2f39d051-52c6-40a7-8461-157def5df61b,
name_2d007624-62c1-440b-95e9-ddbde79d9272
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_24e2c530-43ce-4b2e-8658-97ed0ed4c70d,
name_dac26500-75b6-440b-bd39-c5a4cb45b8cb,
name_42bed404-de0d-4d53-b99c-9957a5d84935,
name_9ea47fab-771b-4e4a-a8aa-2f3867d82c2a,
name_5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
name_91e60022-64f5-4b47-8d0a-65e68a26fb32,
name_0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
name_9d09a8a3-2165-4558-9dc0-76a995659c40,
name_d7bbc814-57f7-49fd-b7a7-53f51ca4744b
result, different first party:
name_3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd,
name_91e60022-64f5-4b47-8d0a-65e68a26fb32,
name_0d12e0aa-7533-4978-a16a-6b7f1f9374e4,
name_9d09a8a3-2165-4558-9dc0-76a995659c40,
name_d7bbc814-57f7-49fd-b7a7-53f51ca4744b
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_b190732b-a22e-40a5-bfb0-dd59b6b1a451,
name_8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d,
name_3bd7615a-3c77-45fc-9885-e4323b5fb346,
name_4cfede65-6a61-41c5-9886-5955cceade7a,
name_3730f2bc-98c5-4fdd-ad6a-8779db336886
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_daaff160-c085-45d0-bd32-043b84c8b1f5,
name_76ff94c6-1ac8-4007-9c34-b6c8ef74078c,
name_70c18ec0-55ec-49cb-aa52-4be50e504999,
name_ef22704d-27b8-4d98-bf39-01993ccca959,
name_9f1a6433-6013-4220-8d99-020f165e1ea3
result, different first party: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
name_3fd13172-3a7c-450f-b720-d6726ff02716,
name_cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
name_880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
name_ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
result, different first party:
name_7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104,
name_3fd13172-3a7c-450f-b720-d6726ff02716,
name_cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6,
name_880c33b5-c2b9-4c11-a9a4-bf1b146ae19a,
name_ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.name = 'name_' + secret; }
read: () => window.name
result, same first party:
name_d565e489-86bc-4b04-9426-0180c2460d3e,
name_9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
name_b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
name_18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
name_db892d3d-9567-46ff-89ee-7cdbc3e2d282
result, different first party:
name_d565e489-86bc-4b04-9426-0180c2460d3e,
name_9590cc9e-d5a8-4a13-a55a-c2185228e3bc,
name_b9569c43-62ec-4a4e-80f5-19f8a15c0a7f,
name_18f6a849-dad5-49e2-8ca8-e3fed59cb19b,
name_db892d3d-9567-46ff-89ee-7cdbc3e2d282
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
HTTPS testsWhich browsers prevent unencrypted network connections?
HTTPS is the protocol that web browsers use to connect securely to websites. When HTTPS is being used, the connection is encrypted so that third parties on the network cannot read content being sent between the server and your browser. In the past, insecure connections were the default and websites would need to actively request that a browser use HTTPS. Now the status quo is shifting, and browser makers are moving toward a world where HTTPS is the default protocol.` |
|||||||||||
|
Insecure website warning
Checks to see if the browser stops loading an insecure website and warns the user before giving them the option to continue. Known as HTTPS-Only Mode in some browsers. |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
passed: true, true, true, true, true result: Insecure website never loaded, Insecure website never loaded, Insecure website never loaded, Insecure website never loaded, Insecure website never loaded |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
passed: true, true, true, true, true result: Insecure website never loaded, Insecure website never loaded, Insecure website never loaded, Insecure website never loaded, Insecure website never loaded |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
passed: false, false, false, false, false result: Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded, Insecure website loaded |
|
Upgradable address
Checks to see if an insecure address entered into the browser's address bar is upgraded to HTTPS whenever possible. |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: false, false, false, false, false passed: false, false, false, false, false |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: false, false, false, false, false passed: false, false, false, false, false |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: false, false, false, false, false passed: false, false, false, false, false |
upgraded: false, false, false, false, false passed: false, false, false, false, false |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: false, false, false, false, false passed: false, false, false, false, false |
|
Upgradable hyperlink
Checks to see if the user has clicked on a hyperlink to an insecure address, if the browser upgrades that address to HTTPS whenever possible. |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: false, false, false, false, false passed: false, false, false, false, false |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: false, false, false, false, false passed: false, false, false, false, false |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: false, false, false, false, false passed: false, false, false, false, false |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
upgraded: true, true, true, true, true passed: true, true, true, true, true |
|
Upgradable image
Checks to see if the browser attempts to upgrade an insecure address for an image to HTTPS whenever possible. |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: false, false, false, false, false result: loaded insecurely, loaded insecurely, loaded insecurely, loaded insecurely, loaded insecurely |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: upgraded, blocked, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
|
Upgradable script
Checks to see if the browser attempts to upgrade an insecure address for an script to HTTPS whenever possible. |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
passed: true, true, true, true, true result: upgraded, upgraded, upgraded, upgraded, upgraded |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
passed: true, true, true, true, true result: blocked, blocked, blocked, blocked, blocked |
|
Misc testsWhich browsers provide additional assorted privacy protections?
This category includes tests for the presence of miscellaneous privacy features |
|||||||||||
|
ECH enabled
Encrypted Client Hello (ECH) is a new protocol that hides the website you are visiting from third-party network eavesdroppers. |
SNI_status: encrypted passed: true, true, true, true, true |
SNI_status: encrypted passed: true, true, true, true, true |
SNI_status: plaintext passed: false, false, false, false, false |
SNI_status: encrypted passed: true, true, true, true, true |
SNI_status: plaintext passed: false, true, false, true, false |
SNI_status: plaintext passed: false, true, true, true, false |
SNI_status: plaintext passed: false, false, false, false, false |
SNI_status: plaintext passed: false, false, false, false, false |
SNI_status: plaintext passed: false, false, false, false, false |
SNI_status: encrypted passed: true, true, true, true, true |
SNI_status: encrypted passed: true, true, false, true, true |
|
GPC enabled first-party
The Global Privacy Control is an HTTP header that can be sent by a browser to instruct a website not to sell the user's personal data to third parties. This test checks to see if the GPC header is sent by default to the top-level website. |
header value: 1 passed: true, true, true, true, true |
header value: undefined passed: false, false, false, false, false |
header value: 1 passed: true, true, true, true, true |
header value: undefined passed: false, false, false, false, false |
header value: undefined passed: false, false, false, false, false |
header value: 1 passed: true, true, true, true, true |
header value: undefined passed: false, false, false, false, false |
header value: undefined passed: false, false, false, false, false |
header value: 1 passed: true, true, true, true, true |
header value: undefined passed: false, false, false, false, false |
header value: undefined passed: false, false, false, false, false |
|
GPC enabled third-party
The Global Privacy Control is an HTTP header that can be sent by a browser to instruct a visited website not to sell the user's personal data to other parties. This test checks to see if the GPC header is sent to third-party elements on the web page. |
sec-gpc: 1 passed: true, true, true, true, true |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
sec-gpc: 1 passed: true, true, true, true, true |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
sec-gpc: 1 passed: true, true, true, true, true |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
|
IP address hidden
IP addresses can be used to uniquely identify a large percentage of users. A proxy, VPN, or Tor can mask a user's IP address. |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
passed: true, true, true, true, true |
passed: false, false, false, false, false |
passed: false, false, false, false, false |
|
Stream isolation
Browsers that use Tor can use a different Tor circuit per top-level website. |
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: false, false, false, false, false
readSameFirstParty:
2a0d:bbc7::f816:3eff:fe1c:869a,
2001:67c:e60:c0c:192:42:116:62,
2a13:9500:145:abcd:be24:11ff:fe8e:7722,
2a04:52c0:1000:253::253,
2a03:4000:37:3:e842:2ff:feb9:c49c
readDifferentFirstParty:
2001:67c:e60:c0c:192:42:116:53,
2001:67c:289c:4::77,
2a0b:f4c2:1::1,
2001:67c:289c:4::82,
2605:6400:30:f503::1
passed: true, true, true, true, true
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
write: () => {
if (!usingTor) {
throw new Error('Unsupported');
}
}
read: async () => {
if (usingTor) {
return ipAddress;
} else {
throw new Error('Unsupported');
}
}
unsupported: true, true, true, true, true
readSameFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
readDifferentFirstParty:
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported,
Error: Unsupported
testFailed: false, false, false, false, false
|
|
Tor enabled
The Tor network sends the browser's web requests through a series of relays to hide a user's IP address, thereby helping to mask their identity and location. This test checks to see if the Tor network is being used by default. |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: true, true, true, true, true passed: true, true, true, true, true |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
IsTorExit: false, false, false, false, false passed: false, false, false, false, false |
|
Tracking query parameter testsWhich browsers remove URL parameters that can track you?
When you browse from one web page to another, tracking companies will frequently attach a 'tracking query parameter' to the address of the second web page. That query parameter may contain a unique identifier that tracks you individually as you browse the web. And these query parameters are frequently synchronized with cookies, making them a powerful tracking vector. Web browsers can protect you from known tracking query parameters by stripping them from web addresses before your browser sends them. (The set of tracking query parameters tested here was largely borrowed from Brave.)` |
|||||||||||
|
__hsfp
HubSpot tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
__hssc
HubSpot tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
__hstc
HubSpot tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
__s
Drip.com email address tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
_hsenc
HubSpot tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
_openstat
Yandex tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
dclid
DoubleClick Click ID (Google) |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
fbclid
Facebook Click Identifier |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
gclid
Google Click Identifier |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
hsCtaTracking
HubSpot tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
mc_eid
Mailchimp Email ID (email recipient's address) |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
mkt_tok
Adobe Marketo tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
ml_subscriber
MailerLite email tracking |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
ml_subscriber_hash
MailerLite email tracking |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
msclkid
Microsoft Click ID |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
oly_anon_id
Omeda marketing 'anonymous' customer id |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
oly_enc_id
Omeda marketing 'known' customer id |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
rb_clickid
Unknown high-entropy tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
s_cid
Adobe Site Catalyst tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
vero_conv
Vero tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
vero_id
Vero tracking parameter |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
wickedid
Wicked Reports e-commerce tracking |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
yclid
Yandex Click ID |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
passed: true, true, true, true, true |
value: 2351493128403359 passed: false, false, false, false, false |
value: 2351493128403359 passed: false, false, false, false, false |
|
Tracker content blocking testsWhich browsers block important known tracking scripts and pixels?
When you visit a web page, it frequently has third-party embedded tracking content, such as scripts and tracking pixels. These embedded components spy on you. Some browsers and browser extensions maintain list of tracking companies and block their content from being loaded. This section checks to see if a browser blocks 20 of the largest trackers listed by https://whotracks.me.` |
|||||||||||
|
Adobe
Tests whether the browser blocks the page from loading the tracker at https://munchkin.marketo.net/munchkin.js |
url: https://munchkin.marketo.net/munchkin.js passed: true, true, true, true, true |
url: https://munchkin.marketo.net/munchkin.js passed: false, false |
url: https://munchkin.marketo.net/munchkin.js passed: true, true, true, true, true |
url: https://munchkin.marketo.net/munchkin.js passed: , false |
url: https://munchkin.marketo.net/munchkin.js |
url: https://munchkin.marketo.net/munchkin.js passed: true, true, true, true, true |
url: https://munchkin.marketo.net/munchkin.js |
url: https://munchkin.marketo.net/munchkin.js |
url: https://munchkin.marketo.net/munchkin.js passed: false |
url: https://munchkin.marketo.net/munchkin.js passed: , false |
url: https://munchkin.marketo.net/munchkin.js |
|
Adobe Audience Manager
Tests whether the browser blocks the page from loading the tracker at https://dpm.demdex.net/ibs |
url: https://dpm.demdex.net/ibs passed: true, true, true, true, true |
url: https://dpm.demdex.net/ibs passed: false, false, false, false, false |
url: https://dpm.demdex.net/ibs passed: true, true, true, true, true |
url: https://dpm.demdex.net/ibs passed: false, false, false, false, false |
url: https://dpm.demdex.net/ibs passed: false, false, false, false, false |
url: https://dpm.demdex.net/ibs passed: true, true, true, true, true |
url: https://dpm.demdex.net/ibs passed: false, false, false |
url: https://dpm.demdex.net/ibs passed: false, false, false, false |
url: https://dpm.demdex.net/ibs passed: , true, false |
url: https://dpm.demdex.net/ibs passed: false, false, false, false, false |
url: https://dpm.demdex.net/ibs passed: false, false, false, false, false |
|
Amazon adsystem
Tests whether the browser blocks the page from loading the tracker at https://s.amazon-adsystem.com/dcm |
url: https://s.amazon-adsystem.com/dcm passed: true, true, true, true, true |
url: https://s.amazon-adsystem.com/dcm passed: false, false, false, false, false |
url: https://s.amazon-adsystem.com/dcm passed: true, true, true, true, true |
url: https://s.amazon-adsystem.com/dcm passed: false, false, false, false, false |
url: https://s.amazon-adsystem.com/dcm passed: false, false, false, false, false |
url: https://s.amazon-adsystem.com/dcm passed: true, true, true, true, true |
url: https://s.amazon-adsystem.com/dcm passed: true, true, true, true, true |
url: https://s.amazon-adsystem.com/dcm passed: false, false, false |
url: https://s.amazon-adsystem.com/dcm passed: false, false, false, false |
url: https://s.amazon-adsystem.com/dcm passed: false, false, false, false, false |
url: https://s.amazon-adsystem.com/dcm passed: false, false, false, false, false |
|
AppNexus
Tests whether the browser blocks the page from loading the tracker at https://ib.adnxs.com/px?id=178248&t=1 |
url: https://ib.adnxs.com/px?id=178248&t=1 passed: true, true, true, true, true |
url: https://ib.adnxs.com/px?id=178248&t=1 |
url: https://ib.adnxs.com/px?id=178248&t=1 passed: true, true, true, true, true |
url: https://ib.adnxs.com/px?id=178248&t=1 passed: , false |
url: https://ib.adnxs.com/px?id=178248&t=1 |
url: https://ib.adnxs.com/px?id=178248&t=1 passed: true, true, true, true, true |
url: https://ib.adnxs.com/px?id=178248&t=1 passed: true, true, true, true, true |
url: https://ib.adnxs.com/px?id=178248&t=1 |
url: https://ib.adnxs.com/px?id=178248&t=1 passed: false, false, false, false, false |
url: https://ib.adnxs.com/px?id=178248&t=1 |
url: https://ib.adnxs.com/px?id=178248&t=1 passed: false, false |
|
Bing Ads
Tests whether the browser blocks the page from loading the tracker at https://bat.bing.com/bat.js |
url: https://bat.bing.com/bat.js passed: true, true, true, true, true |
url: https://bat.bing.com/bat.js passed: false, false, false, false, false |
url: https://bat.bing.com/bat.js passed: true, true, true, true, true |
url: https://bat.bing.com/bat.js passed: false, false, false, false, false |
url: https://bat.bing.com/bat.js passed: false, false, false, false |
url: https://bat.bing.com/bat.js passed: true, true, true, true, true |
url: https://bat.bing.com/bat.js passed: false, false, false, false, false |
url: https://bat.bing.com/bat.js passed: false, false |
url: https://bat.bing.com/bat.js |
url: https://bat.bing.com/bat.js passed: false, false, false, false |
url: https://bat.bing.com/bat.js passed: false, false, false, false, false |
|
Chartbeat
Tests whether the browser blocks the page from loading the tracker at https://static.chartbeat.com/js/chartbeat.js |
url: https://static.chartbeat.com/js/chartbeat.js passed: true, true, true, true, true |
url: https://static.chartbeat.com/js/chartbeat.js passed: false, false, false, false, false |
url: https://static.chartbeat.com/js/chartbeat.js passed: true, true, true, true, true |
url: https://static.chartbeat.com/js/chartbeat.js passed: false, false, false, false, false |
url: https://static.chartbeat.com/js/chartbeat.js passed: false, false, false, false, false |
url: https://static.chartbeat.com/js/chartbeat.js passed: true, true, true, true, true |
url: https://static.chartbeat.com/js/chartbeat.js passed: false, false, false, false, false |
url: https://static.chartbeat.com/js/chartbeat.js passed: false, false, false, false, false |
url: https://static.chartbeat.com/js/chartbeat.js passed: false, false, false, false, false |
url: https://static.chartbeat.com/js/chartbeat.js passed: false, false, false, false, false |
url: https://static.chartbeat.com/js/chartbeat.js passed: false, false, false, false, false |
|
Criteo
Tests whether the browser blocks the page from loading the tracker at https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: true, true, true, true, true |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: false, false, false, false, false |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: true, true, true, true, true |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: false, false, false, false, false |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: false, false, false, false, false |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: true, true, true, true, true |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: false, false, false, false, false |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: false, false, false |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: , false |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: false, false, false, false, false |
url: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx passed: false, false, false, false, false |
|
DoubleClick (Google)
Tests whether the browser blocks the page from loading the tracker at https://securepubads.g.doubleclick.net/static/glade.js |
url: https://securepubads.g.doubleclick.net/static/glade.js passed: true, true, true, true, true |
url: https://securepubads.g.doubleclick.net/static/glade.js |
url: https://securepubads.g.doubleclick.net/static/glade.js passed: true, true, true, true, true |
url: https://securepubads.g.doubleclick.net/static/glade.js |
url: https://securepubads.g.doubleclick.net/static/glade.js |
url: https://securepubads.g.doubleclick.net/static/glade.js passed: true, true, true, true, true |
url: https://securepubads.g.doubleclick.net/static/glade.js passed: true, true, true, true, true |
url: https://securepubads.g.doubleclick.net/static/glade.js |
url: https://securepubads.g.doubleclick.net/static/glade.js |
url: https://securepubads.g.doubleclick.net/static/glade.js |
url: https://securepubads.g.doubleclick.net/static/glade.js |
|
Facebook tracking
Tests whether the browser blocks the page from loading the tracker at https://connect.facebook.net/en_US/fbevents.js |
url: https://connect.facebook.net/en_US/fbevents.js passed: true, true, true, true, true |
url: https://connect.facebook.net/en_US/fbevents.js passed: false, false, false, false, false |
url: https://connect.facebook.net/en_US/fbevents.js passed: true, true, true, true, true |
url: https://connect.facebook.net/en_US/fbevents.js passed: false, false, false, false, false |
url: https://connect.facebook.net/en_US/fbevents.js passed: false, false, false, false, false |
url: https://connect.facebook.net/en_US/fbevents.js passed: true, true, true, true, true |
url: https://connect.facebook.net/en_US/fbevents.js passed: false, false, false, false, false |
url: https://connect.facebook.net/en_US/fbevents.js passed: false, false, false |
url: https://connect.facebook.net/en_US/fbevents.js passed: , false, false, false, false |
url: https://connect.facebook.net/en_US/fbevents.js passed: false, false, false, false, false |
url: https://connect.facebook.net/en_US/fbevents.js passed: false, false, false, false, false |
|
Google (third-party ad pixel)
Tests whether the browser blocks the page from loading the tracker at https://www.google.com/pagead/1p-user-list/ |
url: https://www.google.com/pagead/1p-user-list/ passed: true, true, true, true, true |
url: https://www.google.com/pagead/1p-user-list/ |
url: https://www.google.com/pagead/1p-user-list/ passed: true, true, true, true, true |
url: https://www.google.com/pagead/1p-user-list/ |
url: https://www.google.com/pagead/1p-user-list/ |
url: https://www.google.com/pagead/1p-user-list/ |
url: https://www.google.com/pagead/1p-user-list/ passed: false |
url: https://www.google.com/pagead/1p-user-list/ |
url: https://www.google.com/pagead/1p-user-list/ passed: , false, false, false |
url: https://www.google.com/pagead/1p-user-list/ |
url: https://www.google.com/pagead/1p-user-list/ |
|
Google Analytics
Tests whether the browser blocks the page from loading the tracker at https://google-analytics.com/urchin.js |
url: https://google-analytics.com/urchin.js passed: true, true, true, true, true |
url: https://google-analytics.com/urchin.js |
url: https://google-analytics.com/urchin.js passed: true, true, true, true, true |
url: https://google-analytics.com/urchin.js |
url: https://google-analytics.com/urchin.js |
url: https://google-analytics.com/urchin.js passed: true, true, true, true, true |
url: https://google-analytics.com/urchin.js passed: false, false, false, false |
url: https://google-analytics.com/urchin.js |
url: https://google-analytics.com/urchin.js |
url: https://google-analytics.com/urchin.js |
url: https://google-analytics.com/urchin.js |
|
Google Tag Manager
Tests whether the browser blocks the page from loading the tracker at https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: true, true, true, true, true |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: , false, false |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: true, true, true, true, true |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: , false |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: false, false, false |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: , false |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: , false, false, false |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: false, false, false |
url: https://www.googletagmanager.com/gtag.js?id=GTM-NX4SMZL passed: false, false, false |
|
Index Exchange
Tests whether the browser blocks the page from loading the tracker at https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: true, true, true, true, true |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: , false, false |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: true, true, true, true, true |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: , false |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: false, false |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: true, true, true, true, true |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: true, true, true, true, true |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: false, false, false, false |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 passed: false, false |
url: https://dsum-sec.casalemedia.com/crum?cm_dsp_id=10&external_user_id=629685505537&C=1 |
|
New Relic
Tests whether the browser blocks the page from loading the tracker at https://js-agent.newrelic.com/nr-1212.min.js |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: true, true, true, true, true |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: false, false, false, false, false |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: true, true, true, true, true |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: false, false, false, false, false |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: false, false, false, false, false |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: true, true, true, true, true |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: false, false, false, false, false |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: false, false, false |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: false, false, false |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: false, false, false, false, false |
url: https://js-agent.newrelic.com/nr-1212.min.js passed: false, false, false, false, false |
|
Quantcast
Tests whether the browser blocks the page from loading the tracker at https://pixel.quantserve.com/pixel |
url: https://pixel.quantserve.com/pixel passed: true, true, true, true, true |
url: https://pixel.quantserve.com/pixel passed: , false, false |
url: https://pixel.quantserve.com/pixel passed: true, true, true, true, true |
url: https://pixel.quantserve.com/pixel passed: false |
url: https://pixel.quantserve.com/pixel passed: false, false, false, false, false |
url: https://pixel.quantserve.com/pixel passed: true, true, true, true, true |
url: https://pixel.quantserve.com/pixel passed: false, false |
url: https://pixel.quantserve.com/pixel passed: false |
url: https://pixel.quantserve.com/pixel passed: false, false, false, false, false |
url: https://pixel.quantserve.com/pixel passed: , false, false |
url: https://pixel.quantserve.com/pixel passed: , false, false |
|
Scorecard Research Beacon
Tests whether the browser blocks the page from loading the tracker at https://sb.scorecardresearch.com/internal-c2/default/cs.js |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js passed: true, true, true, true, true |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js passed: , false |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js passed: true, true, true, true, true |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js passed: true, true, true, true, true |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js passed: , false |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js |
url: https://sb.scorecardresearch.com/internal-c2/default/cs.js |
|
Taboola
Tests whether the browser blocks the page from loading the tracker at https://trc.taboola.com/futureplc-tomsguide/trc/3/json |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: true, true, true, true, true |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: false, false, false, false, false |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: true, true, true, true, true |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: false, false, false, false, false |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: false, false, false, false, false |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: true, true, true, true, true |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: false, false, false, false, false |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: false, false, false |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: , false |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: false, false, false, false, false |
url: https://trc.taboola.com/futureplc-tomsguide/trc/3/json passed: false, false, false, false, false |
|
Twitter pixel
Tests whether the browser blocks the page from loading the tracker at https://t.co/i/adsct |
url: https://t.co/i/adsct passed: true, true, true, true, true |
url: https://t.co/i/adsct passed: false, false, false, false, false |
url: https://t.co/i/adsct passed: true, true, true, true, true |
url: https://t.co/i/adsct passed: false, false, false, false, false |
url: https://t.co/i/adsct passed: false, false, false, false |
url: https://t.co/i/adsct passed: true, true, true, true, true |
url: https://t.co/i/adsct passed: false, false, false |
url: https://t.co/i/adsct passed: , false |
url: https://t.co/i/adsct passed: false, false, false, false, false |
url: https://t.co/i/adsct passed: false, false, false, false |
url: https://t.co/i/adsct passed: , false, false, false, false |
|
Yandex Ads
Tests whether the browser blocks the page from loading the tracker at https://yandex.ru/ads/system/header-bidding.js |
url: https://yandex.ru/ads/system/header-bidding.js passed: true, true, true, true, true |
url: https://yandex.ru/ads/system/header-bidding.js passed: false, false, false, false, false |
url: https://yandex.ru/ads/system/header-bidding.js passed: true, true, true, true, true |
url: https://yandex.ru/ads/system/header-bidding.js passed: false, false, false, false, false |
url: https://yandex.ru/ads/system/header-bidding.js passed: false, false, false, false, false |
url: https://yandex.ru/ads/system/header-bidding.js passed: true, true, true, true, true |
url: https://yandex.ru/ads/system/header-bidding.js passed: true, true, true, true, true |
url: https://yandex.ru/ads/system/header-bidding.js passed: false, false, false, false, false |
url: https://yandex.ru/ads/system/header-bidding.js passed: false, false, false, false, false |
url: https://yandex.ru/ads/system/header-bidding.js passed: false, false, false, false, false |
url: https://yandex.ru/ads/system/header-bidding.js passed: false, false, false, false, false |
|
Cross-session first-party tracking testsWhich browsers prevent websites from tracking you across browser sessions?
A common vulnerability of web browsers is that they allow websites ("first parties") to 'tag' your browser with some tracking data. This tag can be used to re-identify you when you return to a website you visited before. This category of leaks can be prevented by browser if they clean or isolate data between browser sessions. (In cases where a user has logged into a website or entered detailed information, it may be justifiable for a browser to retain information across sessions. These tests check when no such justification exists: when you have entered no significant information into a website, will the browser still retain data that allows you to be tracked across sessions?)
|
|||||||||||
|
Alt-Svc
Alt-Svc allows the server to indicate to the web browser that a resource should be loaded on a different server. Because this is a persistent setting, it could be used to track users across websites if it is not correctly partitioned. |
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h3, h2, h3, h2, h3
unsupported: false, false, false, false, false
passed: false, true, false, true, false
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h2, h2, h2, h2, h2
result, different session: h2, h2, h2, h2, h2
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h2, h2, h2, h2, h2
result, different session: h2, h2, h2, h2, h2
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
CacheStorage
The Cache API is a content storage mechanism originally introduced to support ServiceWorkers. If the same Cache object is accessible to multiple websites, it can be abused to track users. |
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p,
f26a2183-950a-4683-b904-12aeb1d2072b_1p,
bedd0c39-a154-4a8f-a181-961237dc6685_1p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p,
26593216-615b-49e5-9d37-3337d7d766e6_1p
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p,
f26a2183-950a-4683-b904-12aeb1d2072b_1p,
bedd0c39-a154-4a8f-a181-961237dc6685_1p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p,
26593216-615b-49e5-9d37-3337d7d766e6_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p
result, different session:
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p
result, different session:
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
985bcd53-4046-45b8-9005-f0d78d2467c5_1p,
985bcd53-4046-45b8-9005-f0d78d2467c5_1p,
985bcd53-4046-45b8-9005-f0d78d2467c5_1p,
985bcd53-4046-45b8-9005-f0d78d2467c5_1p,
985bcd53-4046-45b8-9005-f0d78d2467c5_1p
result, different session:
985bcd53-4046-45b8-9005-f0d78d2467c5_1p,
985bcd53-4046-45b8-9005-f0d78d2467c5_1p,
985bcd53-4046-45b8-9005-f0d78d2467c5_1p,
985bcd53-4046-45b8-9005-f0d78d2467c5_1p,
985bcd53-4046-45b8-9005-f0d78d2467c5_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
6b80d03e-105e-4201-b76d-0596f346aaac_1p,
6b80d03e-105e-4201-b76d-0596f346aaac_1p,
6b80d03e-105e-4201-b76d-0596f346aaac_1p,
6b80d03e-105e-4201-b76d-0596f346aaac_1p,
6b80d03e-105e-4201-b76d-0596f346aaac_1p
result, different session:
6b80d03e-105e-4201-b76d-0596f346aaac_1p,
6b80d03e-105e-4201-b76d-0596f346aaac_1p,
6b80d03e-105e-4201-b76d-0596f346aaac_1p,
6b80d03e-105e-4201-b76d-0596f346aaac_1p,
6b80d03e-105e-4201-b76d-0596f346aaac_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_1p,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_1p,
42bed404-de0d-4d53-b99c-9957a5d84935_1p,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_1p,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_1p
result, different session:
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
3648669b-4782-44ed-afd2-7a44481bcce3_1p,
3648669b-4782-44ed-afd2-7a44481bcce3_1p,
3648669b-4782-44ed-afd2-7a44481bcce3_1p,
3648669b-4782-44ed-afd2-7a44481bcce3_1p,
3648669b-4782-44ed-afd2-7a44481bcce3_1p
result, different session:
3648669b-4782-44ed-afd2-7a44481bcce3_1p,
3648669b-4782-44ed-afd2-7a44481bcce3_1p,
3648669b-4782-44ed-afd2-7a44481bcce3_1p,
3648669b-4782-44ed-afd2-7a44481bcce3_1p,
3648669b-4782-44ed-afd2-7a44481bcce3_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p
result, different session:
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
daaff160-c085-45d0-bd32-043b84c8b1f5_1p,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c_1p,
70c18ec0-55ec-49cb-aa52-4be50e504999_1p,
ef22704d-27b8-4d98-bf39-01993ccca959_1p,
9f1a6433-6013-4220-8d99-020f165e1ea3_1p
result, different session:
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
265951d2-7fcf-4936-8a33-7399094b355d_1p,
265951d2-7fcf-4936-8a33-7399094b355d_1p,
265951d2-7fcf-4936-8a33-7399094b355d_1p,
265951d2-7fcf-4936-8a33-7399094b355d_1p,
265951d2-7fcf-4936-8a33-7399094b355d_1p
result, different session:
265951d2-7fcf-4936-8a33-7399094b355d_1p,
265951d2-7fcf-4936-8a33-7399094b355d_1p,
265951d2-7fcf-4936-8a33-7399094b355d_1p,
265951d2-7fcf-4936-8a33-7399094b355d_1p,
265951d2-7fcf-4936-8a33-7399094b355d_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
cookie (HTTP)
The cookie, first introduced by Netscape in 1994, is a small amount of data stored by your browser on a website's behalf. It has legitimate uses, but it is also the classic cross-site tracking mechanism, and today still the most popular method of tracking users across websites. Browsers can stop cookies from being used for cross-site tracking by either blocking or partitioning them. |
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p_http,
f26a2183-950a-4683-b904-12aeb1d2072b_1p_http,
bedd0c39-a154-4a8f-a181-961237dc6685_1p_http,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p_http,
26593216-615b-49e5-9d37-3337d7d766e6_1p_http
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p_http,
f26a2183-950a-4683-b904-12aeb1d2072b_1p_http,
bedd0c39-a154-4a8f-a181-961237dc6685_1p_http,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p_http,
26593216-615b-49e5-9d37-3337d7d766e6_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p_http,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p_http,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p_http,
a516b344-3178-425e-a92c-fd669b2ab46d_1p_http,
490a9f95-0ed2-404e-909f-0c385f812351_1p_http
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p_http,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p_http,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p_http,
a516b344-3178-425e-a92c-fd669b2ab46d_1p_http,
490a9f95-0ed2-404e-909f-0c385f812351_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p_http,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p_http,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p_http,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p_http,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p_http
result, different session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p_http,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p_http,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p_http,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p_http,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p_http,
b057a3e1-eabe-4063-8914-511e904b99f5_1p_http,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p_http,
54e87806-0159-46ee-aba8-9a081565e4e3_1p_http,
a41840c1-87b9-4c43-9c09-162379992b41_1p_http
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p_http,
b057a3e1-eabe-4063-8914-511e904b99f5_1p_http,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p_http,
54e87806-0159-46ee-aba8-9a081565e4e3_1p_http,
a41840c1-87b9-4c43-9c09-162379992b41_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p_http,
899c1527-1c38-46be-a86e-41e668b85dd9_1p_http,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p_http,
2f39d051-52c6-40a7-8461-157def5df61b_1p_http,
2d007624-62c1-440b-95e9-ddbde79d9272_1p_http
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p_http,
899c1527-1c38-46be-a86e-41e668b85dd9_1p_http,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p_http,
2f39d051-52c6-40a7-8461-157def5df61b_1p_http,
2d007624-62c1-440b-95e9-ddbde79d9272_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_1p_http,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_1p_http,
42bed404-de0d-4d53-b99c-9957a5d84935_1p_http,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_1p_http,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_1p_http
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p_http,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p_http,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p_http,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p_http,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p_http
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p_http,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p_http,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p_http,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p_http,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p_http,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p_http,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p_http,
4cfede65-6a61-41c5-9886-5955cceade7a_1p_http,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p_http
result, different session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p_http,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p_http,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p_http,
4cfede65-6a61-41c5-9886-5955cceade7a_1p_http,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
daaff160-c085-45d0-bd32-043b84c8b1f5_1p_http,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c_1p_http,
70c18ec0-55ec-49cb-aa52-4be50e504999_1p_http,
ef22704d-27b8-4d98-bf39-01993ccca959_1p_http,
9f1a6433-6013-4220-8d99-020f165e1ea3_1p_http
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p_http,
3fd13172-3a7c-450f-b720-d6726ff02716_1p_http,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p_http,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p_http,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p_http
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p_http,
3fd13172-3a7c-450f-b720-d6726ff02716_1p_http,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p_http,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p_http,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p_http,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p_http,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p_http,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p_http,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p_http
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p_http,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p_http,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p_http,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p_http,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
cookie (JS)
The cookie, first introduced by Netscape in 1994, is a small amount of data stored by your browser on a website's behalf. It has legitimate uses, but it is also the classic cross-site tracking mechanism, and today still the most popular method of tracking users across websites. Browsers can stop cookies from being used for cross-site tracking by either blocking or partitioning them. |
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p_js,
f26a2183-950a-4683-b904-12aeb1d2072b_1p_js,
bedd0c39-a154-4a8f-a181-961237dc6685_1p_js,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p_js,
26593216-615b-49e5-9d37-3337d7d766e6_1p_js
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p_js,
f26a2183-950a-4683-b904-12aeb1d2072b_1p_js,
bedd0c39-a154-4a8f-a181-961237dc6685_1p_js,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p_js,
26593216-615b-49e5-9d37-3337d7d766e6_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p_js,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p_js,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p_js,
a516b344-3178-425e-a92c-fd669b2ab46d_1p_js,
490a9f95-0ed2-404e-909f-0c385f812351_1p_js
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p_js,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p_js,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p_js,
a516b344-3178-425e-a92c-fd669b2ab46d_1p_js,
490a9f95-0ed2-404e-909f-0c385f812351_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p_js,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p_js,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p_js,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p_js,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p_js
result, different session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p_js,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p_js,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p_js,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p_js,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p_js,
b057a3e1-eabe-4063-8914-511e904b99f5_1p_js,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p_js,
54e87806-0159-46ee-aba8-9a081565e4e3_1p_js,
a41840c1-87b9-4c43-9c09-162379992b41_1p_js
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p_js,
b057a3e1-eabe-4063-8914-511e904b99f5_1p_js,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p_js,
54e87806-0159-46ee-aba8-9a081565e4e3_1p_js,
a41840c1-87b9-4c43-9c09-162379992b41_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p_js,
899c1527-1c38-46be-a86e-41e668b85dd9_1p_js,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p_js,
2f39d051-52c6-40a7-8461-157def5df61b_1p_js,
2d007624-62c1-440b-95e9-ddbde79d9272_1p_js
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p_js,
899c1527-1c38-46be-a86e-41e668b85dd9_1p_js,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p_js,
2f39d051-52c6-40a7-8461-157def5df61b_1p_js,
2d007624-62c1-440b-95e9-ddbde79d9272_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_1p_js,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_1p_js,
42bed404-de0d-4d53-b99c-9957a5d84935_1p_js,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_1p_js,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_1p_js
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p_js,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p_js,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p_js,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p_js,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p_js
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p_js,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p_js,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p_js,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p_js,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p_js,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p_js,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p_js,
4cfede65-6a61-41c5-9886-5955cceade7a_1p_js,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p_js
result, different session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p_js,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p_js,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p_js,
4cfede65-6a61-41c5-9886-5955cceade7a_1p_js,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
daaff160-c085-45d0-bd32-043b84c8b1f5_1p_js,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c_1p_js,
70c18ec0-55ec-49cb-aa52-4be50e504999_1p_js,
ef22704d-27b8-4d98-bf39-01993ccca959_1p_js,
9f1a6433-6013-4220-8d99-020f165e1ea3_1p_js
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p_js,
3fd13172-3a7c-450f-b720-d6726ff02716_1p_js,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p_js,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p_js,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p_js
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p_js,
3fd13172-3a7c-450f-b720-d6726ff02716_1p_js,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p_js,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p_js,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p_js,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p_js,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p_js,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p_js,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p_js
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p_js,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p_js,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p_js,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p_js,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
CookieStore
The Cookie Store API is an alternative asynchronous API for managing cookies, supported by some browsers. |
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p,
f26a2183-950a-4683-b904-12aeb1d2072b_1p,
bedd0c39-a154-4a8f-a181-961237dc6685_1p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p,
26593216-615b-49e5-9d37-3337d7d766e6_1p
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p,
f26a2183-950a-4683-b904-12aeb1d2072b_1p,
bedd0c39-a154-4a8f-a181-961237dc6685_1p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p,
26593216-615b-49e5-9d37-3337d7d766e6_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p,
a516b344-3178-425e-a92c-fd669b2ab46d_1p,
490a9f95-0ed2-404e-909f-0c385f812351_1p
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p,
a516b344-3178-425e-a92c-fd669b2ab46d_1p,
490a9f95-0ed2-404e-909f-0c385f812351_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p
result, different session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p,
b057a3e1-eabe-4063-8914-511e904b99f5_1p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p,
54e87806-0159-46ee-aba8-9a081565e4e3_1p,
a41840c1-87b9-4c43-9c09-162379992b41_1p
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p,
b057a3e1-eabe-4063-8914-511e904b99f5_1p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p,
54e87806-0159-46ee-aba8-9a081565e4e3_1p,
a41840c1-87b9-4c43-9c09-162379992b41_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p,
899c1527-1c38-46be-a86e-41e668b85dd9_1p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p,
2f39d051-52c6-40a7-8461-157def5df61b_1p,
2d007624-62c1-440b-95e9-ddbde79d9272_1p
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p,
899c1527-1c38-46be-a86e-41e668b85dd9_1p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p,
2f39d051-52c6-40a7-8461-157def5df61b_1p,
2d007624-62c1-440b-95e9-ddbde79d9272_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_1p,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_1p,
42bed404-de0d-4d53-b99c-9957a5d84935_1p,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_1p,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_1p
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p,
4cfede65-6a61-41c5-9886-5955cceade7a_1p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p
result, different session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p,
4cfede65-6a61-41c5-9886-5955cceade7a_1p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
daaff160-c085-45d0-bd32-043b84c8b1f5_1p,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c_1p,
70c18ec0-55ec-49cb-aa52-4be50e504999_1p,
ef22704d-27b8-4d98-bf39-01993ccca959_1p,
9f1a6433-6013-4220-8d99-020f165e1ea3_1p
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p,
3fd13172-3a7c-450f-b720-d6726ff02716_1p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p,
3fd13172-3a7c-450f-b720-d6726ff02716_1p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
CSS cache
CSS stylesheets are cached, and if that cache is shared between websites, it can be used to track users across sites. |
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_8372593737570853,
fake_4015786122319791,
fake_1954087218364271,
fake_9833645752331086,
fake_3599519692020743
result, different session:
fake_8372593737570853,
fake_4015786122319791,
fake_1954087218364271,
fake_9833645752331086,
fake_3599519692020743
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_6357900385233923,
fake_6721309280208096,
fake_8669557862440189,
fake_6965871114492057,
fake_9424891875906458
result, different session:
fake_6357900385233923,
fake_6721309280208096,
fake_8669557862440189,
fake_6965871114492057,
fake_9424891875906458
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_4375202266265479,
fake_7386833318342212,
fake_6069548707350272,
fake_349561047594529,
fake_20182242739131495
result, different session:
fake_4375202266265479,
fake_7386833318342212,
fake_6069548707350272,
fake_349561047594529,
fake_20182242739131495
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_9391655236059038,
fake_49535514959221993,
fake_30663854991317163,
fake_5403451265928634,
fake_4954802627399508
result, different session:
fake_9391655236059038,
fake_49535514959221993,
fake_30663854991317163,
fake_5403451265928634,
fake_4954802627399508
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_9085064810416037,
fake_5168539389900004,
fake_661940374810402,
fake_2798505406644045,
fake_4717996680300267
result, different session:
fake_9085064810416037,
fake_5168539389900004,
fake_661940374810402,
fake_2798505406644045,
fake_4717996680300267
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_10546310870256348,
fake_6636020888544603,
fake_918738822435555,
fake_02673855085534349,
fake_10931508811122703
result, different session:
fake_12707643787240097,
fake_4396041055667379,
fake_2436320418429181,
fake_7605520870798228,
fake_4132262670202187
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_8636567991870723,
fake_5540309331679791,
fake_16846163869021846,
fake_22680524717829864,
fake_8122181109217768
result, different session:
fake_8636567991870723,
fake_5540309331679791,
fake_16846163869021846,
fake_22680524717829864,
fake_8122181109217768
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_01675854039305391,
fake_23358945269183984,
fake_8237866820718402,
fake_24553067229637948,
fake_9881260296776626
result, different session:
fake_01675854039305391,
fake_23358945269183984,
fake_8237866820718402,
fake_24553067229637948,
fake_9881260296776626
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_16584333409314334,
fake_4241582514432116,
fake_8929627565387082,
fake_8881446982041945,
fake_39670787573686406
result, different session:
fake_8808840148487955,
fake_3383566766690793,
fake_08620112109764122,
fake_7625074771998768,
fake_5845345810917604
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_5965820833239688,
fake_3500083290551117,
fake_16234664611470517,
fake_1877550888846775,
fake_9630295089157919
result, different session:
fake_5965820833239688,
fake_3500083290551117,
fake_16234664611470517,
fake_1877550888846775,
fake_9630295089157919
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_1958076888320135,
fake_5149331759762488,
fake_9098608084897024,
fake_6368835564416437,
fake_5761804340215391
result, different session:
fake_1958076888320135,
fake_5149331759762488,
fake_9098608084897024,
fake_6368835564416437,
fake_5761804340215391
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
favicon cache
A favicon is an icon that represents a website, typically shown in browser tab and bookmarks menu. If the favicon cache is not partitioned, it can be used to track users across websites. |
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
fetch cache
When a resource is received via the Fetch API, it is frequently cached. That cache can potentially be abused for cross-site tracking. |
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
font cache
Web fonts are sometimes stored in their own cache, which is vulnerable to being abused for cross-site tracking. |
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
iframe cache
An iframe is an element in a web page than allows websites to embed a second web page. Caching of this web page could be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
image cache
Caching of images in web browsers is a standard behavior. But if that cache leaks between websites, it can be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
indexedDB
The IndexedDB API exposes a transactional database to web pages. That database can be used to track users across websites, unless it is partitioned. |
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p,
f26a2183-950a-4683-b904-12aeb1d2072b_1p,
bedd0c39-a154-4a8f-a181-961237dc6685_1p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p,
26593216-615b-49e5-9d37-3337d7d766e6_1p
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p,
f26a2183-950a-4683-b904-12aeb1d2072b_1p,
bedd0c39-a154-4a8f-a181-961237dc6685_1p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p,
26593216-615b-49e5-9d37-3337d7d766e6_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p,
a516b344-3178-425e-a92c-fd669b2ab46d_1p,
490a9f95-0ed2-404e-909f-0c385f812351_1p
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p,
a516b344-3178-425e-a92c-fd669b2ab46d_1p,
490a9f95-0ed2-404e-909f-0c385f812351_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p
result, different session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p,
b057a3e1-eabe-4063-8914-511e904b99f5_1p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p,
54e87806-0159-46ee-aba8-9a081565e4e3_1p,
a41840c1-87b9-4c43-9c09-162379992b41_1p
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p,
b057a3e1-eabe-4063-8914-511e904b99f5_1p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p,
54e87806-0159-46ee-aba8-9a081565e4e3_1p,
a41840c1-87b9-4c43-9c09-162379992b41_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p,
899c1527-1c38-46be-a86e-41e668b85dd9_1p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p,
2f39d051-52c6-40a7-8461-157def5df61b_1p,
2d007624-62c1-440b-95e9-ddbde79d9272_1p
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p,
899c1527-1c38-46be-a86e-41e668b85dd9_1p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p,
2f39d051-52c6-40a7-8461-157def5df61b_1p,
2d007624-62c1-440b-95e9-ddbde79d9272_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_1p,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_1p,
42bed404-de0d-4d53-b99c-9957a5d84935_1p,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_1p,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_1p
result, different session: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p,
4cfede65-6a61-41c5-9886-5955cceade7a_1p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p
result, different session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p,
4cfede65-6a61-41c5-9886-5955cceade7a_1p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
daaff160-c085-45d0-bd32-043b84c8b1f5_1p,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c_1p,
70c18ec0-55ec-49cb-aa52-4be50e504999_1p,
ef22704d-27b8-4d98-bf39-01993ccca959_1p,
9f1a6433-6013-4220-8d99-020f165e1ea3_1p
result, different session: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p,
3fd13172-3a7c-450f-b720-d6726ff02716_1p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p,
3fd13172-3a7c-450f-b720-d6726ff02716_1p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
localStorage
The localStorage API gives websites access to a key-value database that will remain available across visits. If the localStorage API is not partitioned or blocked, it can also be used to track users across websites. |
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p,
f26a2183-950a-4683-b904-12aeb1d2072b_1p,
bedd0c39-a154-4a8f-a181-961237dc6685_1p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p,
26593216-615b-49e5-9d37-3337d7d766e6_1p
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_1p,
f26a2183-950a-4683-b904-12aeb1d2072b_1p,
bedd0c39-a154-4a8f-a181-961237dc6685_1p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_1p,
26593216-615b-49e5-9d37-3337d7d766e6_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p,
a516b344-3178-425e-a92c-fd669b2ab46d_1p,
490a9f95-0ed2-404e-909f-0c385f812351_1p
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_1p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_1p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_1p,
a516b344-3178-425e-a92c-fd669b2ab46d_1p,
490a9f95-0ed2-404e-909f-0c385f812351_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p
result, different session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_1p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_1p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_1p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_1p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p,
b057a3e1-eabe-4063-8914-511e904b99f5_1p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p,
54e87806-0159-46ee-aba8-9a081565e4e3_1p,
a41840c1-87b9-4c43-9c09-162379992b41_1p
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_1p,
b057a3e1-eabe-4063-8914-511e904b99f5_1p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_1p,
54e87806-0159-46ee-aba8-9a081565e4e3_1p,
a41840c1-87b9-4c43-9c09-162379992b41_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p,
899c1527-1c38-46be-a86e-41e668b85dd9_1p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p,
2f39d051-52c6-40a7-8461-157def5df61b_1p,
2d007624-62c1-440b-95e9-ddbde79d9272_1p
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_1p,
899c1527-1c38-46be-a86e-41e668b85dd9_1p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_1p,
2f39d051-52c6-40a7-8461-157def5df61b_1p,
2d007624-62c1-440b-95e9-ddbde79d9272_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_1p,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_1p,
42bed404-de0d-4d53-b99c-9957a5d84935_1p,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_1p,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_1p
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_1p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_1p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_1p,
9d09a8a3-2165-4558-9dc0-76a995659c40_1p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p,
4cfede65-6a61-41c5-9886-5955cceade7a_1p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p
result, different session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_1p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_1p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_1p,
4cfede65-6a61-41c5-9886-5955cceade7a_1p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
daaff160-c085-45d0-bd32-043b84c8b1f5_1p,
76ff94c6-1ac8-4007-9c34-b6c8ef74078c_1p,
70c18ec0-55ec-49cb-aa52-4be50e504999_1p,
ef22704d-27b8-4d98-bf39-01993ccca959_1p,
9f1a6433-6013-4220-8d99-020f165e1ea3_1p
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p,
3fd13172-3a7c-450f-b720-d6726ff02716_1p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_1p,
3fd13172-3a7c-450f-b720-d6726ff02716_1p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_1p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_1p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_1p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_1p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_1p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_1p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_1p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
prefetch cache
A <link rel='prefetch'...> suggests to browsers they should fetch a resource ahead of time and cache it. But if browsers don't partition this cache, it can be used to track users across websites. |
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
script cache
Caching of scripts in web browsers is a standard behavior. But if that cache leaks between websites, it can be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
XMLHttpRequest cache
Similar to the newer Fetch API, any resource received may be cached by the browser. The cache is potentially vulnerable to cross-site tracking attack. |
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
Cross-session third-party tracking testsWhich browsers prevent third-party trackers from tracking you across browser sessions?
A common vulnerability of web browsers is that they allow third-party trackers to 'tag' your browser with some tracking data. This tag can be used to re-identify you when you return to a website you visited before. This category of leaks can be prevented by browser if they clean or isolate data between browser sessions. (In cases where a user has logged into a website or entered detailed information, it may be justifiable for a browser to retain information across sessions. These tests check when no such justification exists: when you have entered no significant information into a website, will the browser still retain data that allows you to be tracked across sessions?) |
|||||||||||
|
Alt-Svc
Alt-Svc allows the server to indicate to the web browser that a resource should be loaded on a different server. Because this is a persistent setting, it could be used to track users across websites if it is not correctly partitioned. |
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h3, h2, h3, h2, h3
unsupported: false, false, false, false, false
passed: false, true, false, true, false
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h2, h2, h2, h2, h2
result, different session: h2, h2, h2, h2, h2
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h2, h2, h2, h2, h2
result, different session: h2, h2, h2, h2, h2
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async () => {
// Clear Alt-Svc caching first.
let responseText = '';
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/clear');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after clear:', responseText);
// Store "h3" state in Alt-Svc cache
for (let i = 0; i < 3; ++i) {
await fetch(altSvcOrigin + '/set');
await sleepMs(100);
}
responseText = await fetchText(altSvcOrigin + '/protocol');
console.log('after set:', responseText);
}
read: async () => {
const protocol = await fetchText(altSvcOrigin + '/protocol');
if ((new URL(window.location)).searchParams.get('thirdparty') === 'same') {
if (protocol !== 'h3') {
throw new Error('Unsupported');
}
}
return protocol;
}
result, same session: h3, h3, h3, h3, h3
result, different session: h2, h2, h2, h2, h2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
|
CacheStorage
The Cache API is a content storage mechanism originally introduced to support ServiceWorkers. If the same Cache object is accessible to multiple websites, it can be abused to track users. |
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p,
f26a2183-950a-4683-b904-12aeb1d2072b_3p,
bedd0c39-a154-4a8f-a181-961237dc6685_3p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p,
26593216-615b-49e5-9d37-3337d7d766e6_3p
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p,
f26a2183-950a-4683-b904-12aeb1d2072b_3p,
bedd0c39-a154-4a8f-a181-961237dc6685_3p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p,
26593216-615b-49e5-9d37-3337d7d766e6_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p
result, different session:
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p,
959429c0-a844-4657-b5ef-4f5c37edc0b5_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p
result, different session:
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p,
ea1b4ad1-5b9e-45b4-89b6-d367b904a211_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
985bcd53-4046-45b8-9005-f0d78d2467c5_3p,
985bcd53-4046-45b8-9005-f0d78d2467c5_3p,
985bcd53-4046-45b8-9005-f0d78d2467c5_3p,
985bcd53-4046-45b8-9005-f0d78d2467c5_3p,
985bcd53-4046-45b8-9005-f0d78d2467c5_3p
result, different session:
985bcd53-4046-45b8-9005-f0d78d2467c5_3p,
985bcd53-4046-45b8-9005-f0d78d2467c5_3p,
985bcd53-4046-45b8-9005-f0d78d2467c5_3p,
985bcd53-4046-45b8-9005-f0d78d2467c5_3p,
985bcd53-4046-45b8-9005-f0d78d2467c5_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
6b80d03e-105e-4201-b76d-0596f346aaac_3p,
6b80d03e-105e-4201-b76d-0596f346aaac_3p,
6b80d03e-105e-4201-b76d-0596f346aaac_3p,
6b80d03e-105e-4201-b76d-0596f346aaac_3p,
6b80d03e-105e-4201-b76d-0596f346aaac_3p
result, different session:
6b80d03e-105e-4201-b76d-0596f346aaac_3p,
6b80d03e-105e-4201-b76d-0596f346aaac_3p,
6b80d03e-105e-4201-b76d-0596f346aaac_3p,
6b80d03e-105e-4201-b76d-0596f346aaac_3p,
6b80d03e-105e-4201-b76d-0596f346aaac_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_3p,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_3p,
42bed404-de0d-4d53-b99c-9957a5d84935_3p,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_3p,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_3p
result, different session:
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined,
Error: can't access property "url",
cacheKeys[0] is undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
3648669b-4782-44ed-afd2-7a44481bcce3_3p,
3648669b-4782-44ed-afd2-7a44481bcce3_3p,
3648669b-4782-44ed-afd2-7a44481bcce3_3p,
3648669b-4782-44ed-afd2-7a44481bcce3_3p,
3648669b-4782-44ed-afd2-7a44481bcce3_3p
result, different session:
3648669b-4782-44ed-afd2-7a44481bcce3_3p,
3648669b-4782-44ed-afd2-7a44481bcce3_3p,
3648669b-4782-44ed-afd2-7a44481bcce3_3p,
3648669b-4782-44ed-afd2-7a44481bcce3_3p,
3648669b-4782-44ed-afd2-7a44481bcce3_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p
result, different session:
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p,
dd2b3793-d7ae-4afb-9426-21d4f333a8d3_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.
result, different session:
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
265951d2-7fcf-4936-8a33-7399094b355d_3p,
265951d2-7fcf-4936-8a33-7399094b355d_3p,
265951d2-7fcf-4936-8a33-7399094b355d_3p,
265951d2-7fcf-4936-8a33-7399094b355d_3p,
265951d2-7fcf-4936-8a33-7399094b355d_3p
result, different session:
265951d2-7fcf-4936-8a33-7399094b355d_3p,
265951d2-7fcf-4936-8a33-7399094b355d_3p,
265951d2-7fcf-4936-8a33-7399094b355d_3p,
265951d2-7fcf-4936-8a33-7399094b355d_3p,
265951d2-7fcf-4936-8a33-7399094b355d_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
try {
const cache = await window.caches.open('supercookies');
cache.addAll([`test.css?key=${key}`]);
} catch (e) {
throw new Error('Unsupported');
}
}
read: async () => {
const cache = await window.caches.open('supercookies');
const cacheKeys = await cache.keys();
const url = cacheKeys[0].url;
return (new URL(url)).searchParams.get('key');
}
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
cookie (HTTP)
The cookie, first introduced by Netscape in 1994, is a small amount of data stored by your browser on a website's behalf. It has legitimate uses, but it is also the classic cross-site tracking mechanism, and today still the most popular method of tracking users across websites. Browsers can stop cookies from being used for cross-site tracking by either blocking or partitioning them. |
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p_http,
f26a2183-950a-4683-b904-12aeb1d2072b_3p_http,
bedd0c39-a154-4a8f-a181-961237dc6685_3p_http,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p_http,
26593216-615b-49e5-9d37-3337d7d766e6_3p_http
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p_http,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p_http,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p_http,
a516b344-3178-425e-a92c-fd669b2ab46d_3p_http,
490a9f95-0ed2-404e-909f-0c385f812351_3p_http
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p_http,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p_http,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p_http,
a516b344-3178-425e-a92c-fd669b2ab46d_3p_http,
490a9f95-0ed2-404e-909f-0c385f812351_3p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p_http,
b057a3e1-eabe-4063-8914-511e904b99f5_3p_http,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p_http,
54e87806-0159-46ee-aba8-9a081565e4e3_3p_http,
a41840c1-87b9-4c43-9c09-162379992b41_3p_http
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p_http,
b057a3e1-eabe-4063-8914-511e904b99f5_3p_http,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p_http,
54e87806-0159-46ee-aba8-9a081565e4e3_3p_http,
a41840c1-87b9-4c43-9c09-162379992b41_3p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p_http,
899c1527-1c38-46be-a86e-41e668b85dd9_3p_http,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p_http,
2f39d051-52c6-40a7-8461-157def5df61b_3p_http,
2d007624-62c1-440b-95e9-ddbde79d9272_3p_http
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p_http,
899c1527-1c38-46be-a86e-41e668b85dd9_3p_http,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p_http,
2f39d051-52c6-40a7-8461-157def5df61b_3p_http,
2d007624-62c1-440b-95e9-ddbde79d9272_3p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_3p_http,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_3p_http,
42bed404-de0d-4d53-b99c-9957a5d84935_3p_http,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_3p_http,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_3p_http
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p_http,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p_http,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p_http,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p_http,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p_http
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p_http,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p_http,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p_http,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p_http,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p_http,
3fd13172-3a7c-450f-b720-d6726ff02716_3p_http,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p_http,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p_http,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p_http
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p_http,
3fd13172-3a7c-450f-b720-d6726ff02716_3p_http,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p_http,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p_http,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
// Request a page that will send an HTTPOnly 'set-cookie' response header with secret value.
await fetch(`${baseURI}cookie?secret=${secret}_http`);
}
read: async () => {
// Test if we now send a requests with a 'cookie' header containing the secret.
const response = await fetch(`${baseURI}headers`);
const cookie = (await response.json()).cookie;
return cookie ? cookie.match(/secret=([\w-]+)/)[1] : null;
}
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p_http,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p_http,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p_http,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p_http,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p_http
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p_http,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p_http,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p_http,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p_http,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p_http
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
cookie (JS)
The cookie, first introduced by Netscape in 1994, is a small amount of data stored by your browser on a website's behalf. It has legitimate uses, but it is also the classic cross-site tracking mechanism, and today still the most popular method of tracking users across websites. Browsers can stop cookies from being used for cross-site tracking by either blocking or partitioning them. |
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p_js,
f26a2183-950a-4683-b904-12aeb1d2072b_3p_js,
bedd0c39-a154-4a8f-a181-961237dc6685_3p_js,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p_js,
26593216-615b-49e5-9d37-3337d7d766e6_3p_js
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p_js,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p_js,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p_js,
a516b344-3178-425e-a92c-fd669b2ab46d_3p_js,
490a9f95-0ed2-404e-909f-0c385f812351_3p_js
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p_js,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p_js,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p_js,
a516b344-3178-425e-a92c-fd669b2ab46d_3p_js,
490a9f95-0ed2-404e-909f-0c385f812351_3p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p_js,
b057a3e1-eabe-4063-8914-511e904b99f5_3p_js,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p_js,
54e87806-0159-46ee-aba8-9a081565e4e3_3p_js,
a41840c1-87b9-4c43-9c09-162379992b41_3p_js
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p_js,
b057a3e1-eabe-4063-8914-511e904b99f5_3p_js,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p_js,
54e87806-0159-46ee-aba8-9a081565e4e3_3p_js,
a41840c1-87b9-4c43-9c09-162379992b41_3p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p_js,
899c1527-1c38-46be-a86e-41e668b85dd9_3p_js,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p_js,
2f39d051-52c6-40a7-8461-157def5df61b_3p_js,
2d007624-62c1-440b-95e9-ddbde79d9272_3p_js
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p_js,
899c1527-1c38-46be-a86e-41e668b85dd9_3p_js,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p_js,
2f39d051-52c6-40a7-8461-157def5df61b_3p_js,
2d007624-62c1-440b-95e9-ddbde79d9272_3p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_3p_js,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_3p_js,
42bed404-de0d-4d53-b99c-9957a5d84935_3p_js,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_3p_js,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_3p_js
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p_js,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p_js,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p_js,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p_js,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p_js
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p_js,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p_js,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p_js,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p_js,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p_js,
3fd13172-3a7c-450f-b720-d6726ff02716_3p_js,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p_js,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p_js,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p_js
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p_js,
3fd13172-3a7c-450f-b720-d6726ff02716_3p_js,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p_js,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p_js,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => {
document.cookie = `secret=${secret}_js; max-age=3600; SameSite=None; Secure`;
}
read: () => document.cookie ? document.cookie.match(/secret=([\w-]+)/)[1] : null
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p_js,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p_js,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p_js,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p_js,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p_js
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p_js,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p_js,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p_js,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p_js,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p_js
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
CookieStore
The Cookie Store API is an alternative asynchronous API for managing cookies, supported by some browsers. |
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p,
f26a2183-950a-4683-b904-12aeb1d2072b_3p,
bedd0c39-a154-4a8f-a181-961237dc6685_3p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p,
26593216-615b-49e5-9d37-3337d7d766e6_3p
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p,
a516b344-3178-425e-a92c-fd669b2ab46d_3p,
490a9f95-0ed2-404e-909f-0c385f812351_3p
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p,
a516b344-3178-425e-a92c-fd669b2ab46d_3p,
490a9f95-0ed2-404e-909f-0c385f812351_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p,
b057a3e1-eabe-4063-8914-511e904b99f5_3p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p,
54e87806-0159-46ee-aba8-9a081565e4e3_3p,
a41840c1-87b9-4c43-9c09-162379992b41_3p
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p,
b057a3e1-eabe-4063-8914-511e904b99f5_3p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p,
54e87806-0159-46ee-aba8-9a081565e4e3_3p,
a41840c1-87b9-4c43-9c09-162379992b41_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p,
899c1527-1c38-46be-a86e-41e668b85dd9_3p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p,
2f39d051-52c6-40a7-8461-157def5df61b_3p,
2d007624-62c1-440b-95e9-ddbde79d9272_3p
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p,
899c1527-1c38-46be-a86e-41e668b85dd9_3p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p,
2f39d051-52c6-40a7-8461-157def5df61b_3p,
2d007624-62c1-440b-95e9-ddbde79d9272_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_3p,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_3p,
42bed404-de0d-4d53-b99c-9957a5d84935_3p,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_3p,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_3p
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session: , , , ,
result, different session: , , , ,
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p,
3fd13172-3a7c-450f-b720-d6726ff02716_3p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p,
3fd13172-3a7c-450f-b720-d6726ff02716_3p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (data) => {
const msPerHour = 60 * 60 * 1000;
if (!window.cookieStore) {
throw new Error('Unsupported');
}
window.cookieStore.set({
name: 'partition_test',
value: data,
expires: Date.now() + msPerHour,
sameSite: 'none'
});
}
read: async () => {
if (!window.cookieStore) {
throw new Error('Unsupported');
}
const cookie = await window.cookieStore.get('partition_test');
if (!cookie) {
return null;
}
return cookie.value;
}
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
CSS cache
CSS stylesheets are cached, and if that cache is shared between websites, it can be used to track users across sites. |
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_5955342166680484,
fake_7578212096219816,
fake_29751085370268426,
fake_7236287404189992,
fake_9362874413858242
result, different session:
fake_5955342166680484,
fake_7578212096219816,
fake_29751085370268426,
fake_7236287404189992,
fake_9362874413858242
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_30397139322403155,
fake_7888313979216173,
fake_2670118402894075,
fake_7857346109811616,
fake_4829642640762619
result, different session:
fake_30397139322403155,
fake_7888313979216173,
fake_2670118402894075,
fake_7857346109811616,
fake_4829642640762619
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_7981666916090024,
fake_7070939508859415,
fake_43197326256984536,
fake_35695206146366787,
fake_6762384629985216
result, different session:
fake_7981666916090024,
fake_7070939508859415,
fake_43197326256984536,
fake_35695206146366787,
fake_6762384629985216
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_9715533988745213,
fake_5729891487776577,
fake_22575106089112396,
fake_4137986268834013,
fake_2167181265325453
result, different session:
fake_9715533988745213,
fake_5729891487776577,
fake_22575106089112396,
fake_4137986268834013,
fake_2167181265325453
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_19286711740491258,
fake_31177162238896217,
fake_7015139941553334,
fake_21312999720103076,
fake_733459239287487
result, different session:
fake_19286711740491258,
fake_31177162238896217,
fake_7015139941553334,
fake_21312999720103076,
fake_733459239287487
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_4439674772846556,
fake_40351830790431387,
fake_1945540578215097,
fake_5251103262633121,
fake_44306745012819126
result, different session:
fake_33628967279101674,
fake_4239887908064399,
fake_3928236655997841,
fake_9023050630444454,
fake_3493132833325605
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_5719110521276694,
fake_9600831304371478,
fake_764693420075014,
fake_16546999281967567,
fake_24377590700263507
result, different session:
fake_5719110521276694,
fake_9600831304371478,
fake_764693420075014,
fake_16546999281967567,
fake_24377590700263507
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_34513521667358393,
fake_32627633680550705,
fake_8948395292515221,
fake_876107663017631,
fake_14616350364138686
result, different session:
fake_34513521667358393,
fake_32627633680550705,
fake_8948395292515221,
fake_876107663017631,
fake_14616350364138686
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_2237151368292769,
fake_8040557030947495,
fake_9323609391747731,
fake_8339686269096305,
fake_456512222172345
result, different session:
fake_7192606160218094,
fake_9143008691674315,
fake_7215804094350706,
fake_1521530632846515,
fake_4663651125625654
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_0036841951806163564,
fake_02225042517886644,
fake_1467996830394822,
fake_6882825582536727,
fake_5304773056280294
result, different session:
fake_0036841951806163564,
fake_02225042517886644,
fake_1467996830394822,
fake_6882825582536727,
fake_5304773056280294
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return key;
}
read: async (key) => {
const href = testURI('resource', 'css', key);
const head = document.getElementsByTagName('head')[0];
head.innerHTML += `<link type="text/css" rel="stylesheet" href="${href}">`;
const testElement = document.querySelector('#css');
let fontFamily;
while (true) {
await sleepMs(100);
fontFamily = window.getComputedStyle(testElement).fontFamily;
if (fontFamily.startsWith('fake')) {
break;
}
}
console.log(fontFamily);
return fontFamily;
}
result, same session:
fake_542246384289226,
fake_0006908576185788995,
fake_6240444608185514,
fake_7209335282225258,
fake_32073998876799137
result, different session:
fake_542246384289226,
fake_0006908576185788995,
fake_6240444608185514,
fake_7209335282225258,
fake_32073998876799137
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
favicon cache
A favicon is an icon that represents a website, typically shown in browser tab and bookmarks menu. If the favicon cache is not partitioned, it can be used to track users across websites. |
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => key
read: async (key) => {
// Wait for the favicon to load (defined in supercookies.html)
await sleepMs(2000);
const response = await fetch(
testURI('ctr', 'favicon', key), { cache: 'reload' });
const count = (await response.text()).trim();
if (count === '0') {
throw new Error('No requests received');
}
return count;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
fetch cache
When a resource is received via the Fetch API, it is frequently cached. That cache can potentially be abused for cross-site tracking. |
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
return key;
}
read: async (key) => {
await fetch(testURI('resource', 'fetch', key),
{ cache: 'force-cache' });
const countResponse = await fetch(testURI('ctr', 'fetch', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
font cache
Web fonts are sometimes stored in their own cache, which is vulnerable to being abused for cross-site tracking. |
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } body { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
return key;
}
read: async (key) => {
const text = document.createElement('span');
text.id = 'text';
text.innerText = 'test';
document.body.appendChild(text);
const originalWidth = text.getBoundingClientRect().width;
const style = document.createElement('style');
style.type = 'text/css';
const fontURI = testURI('resource', 'font', key);
style.innerHTML = `@font-face {font-family: "myFont"; src: url("${fontURI}"); } #text { font-family: "myFont" }`;
document.getElementsByTagName('head')[0].appendChild(style);
let newWidth;
do {
await sleepMs(100);
newWidth = text.getBoundingClientRect().width;
} while (newWidth < 0 || newWidth === originalWidth);
const response = await fetch(
testURI('ctr', 'font', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
iframe cache
An iframe is an element in a web page than allows websites to embed a second web page. Caching of this web page could be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
iframe.addEventListener('load', () => resolve(key), { once: true });
iframe.src = testURI('resource', 'page', key);
})
read: async (key) => {
const iframe = document.createElement('iframe');
document.body.appendChild(iframe);
const iframeLoadPromise = new Promise((resolve, reject) => {
iframe.addEventListener('load', resolve, { once: true });
});
const address = testURI('resource', 'page', key);
iframe.src = address;
await iframeLoadPromise;
const response = await fetch(
testURI('ctr', 'page', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
image cache
Caching of images in web browsers is a standard behavior. But if that cache leaks between websites, it can be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const img = document.createElement('img');
document.body.appendChild(img);
img.addEventListener('load', () => resolve(key), { once: true });
img.src = testURI('resource', 'image', key);
})
read: async (key) => {
const img = document.createElement('img');
document.body.appendChild(img);
const imgLoadPromise = new Promise((resolve, reject) => {
img.addEventListener('load', resolve, { once: true });
});
img.src = testURI('resource', 'image', key);
await imgLoadPromise;
const response = await fetch(
testURI('ctr', 'image', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
indexedDB
The IndexedDB API exposes a transactional database to web pages. That database can be used to track users across websites, unless it is partitioned. |
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p,
f26a2183-950a-4683-b904-12aeb1d2072b_3p,
bedd0c39-a154-4a8f-a181-961237dc6685_3p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p,
26593216-615b-49e5-9d37-3337d7d766e6_3p
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p,
f26a2183-950a-4683-b904-12aeb1d2072b_3p,
bedd0c39-a154-4a8f-a181-961237dc6685_3p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p,
26593216-615b-49e5-9d37-3337d7d766e6_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p,
a516b344-3178-425e-a92c-fd669b2ab46d_3p,
490a9f95-0ed2-404e-909f-0c385f812351_3p
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p,
a516b344-3178-425e-a92c-fd669b2ab46d_3p,
490a9f95-0ed2-404e-909f-0c385f812351_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_3p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_3p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_3p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_3p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_3p
result, different session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_3p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_3p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_3p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_3p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p,
b057a3e1-eabe-4063-8914-511e904b99f5_3p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p,
54e87806-0159-46ee-aba8-9a081565e4e3_3p,
a41840c1-87b9-4c43-9c09-162379992b41_3p
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p,
b057a3e1-eabe-4063-8914-511e904b99f5_3p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p,
54e87806-0159-46ee-aba8-9a081565e4e3_3p,
a41840c1-87b9-4c43-9c09-162379992b41_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p,
899c1527-1c38-46be-a86e-41e668b85dd9_3p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p,
2f39d051-52c6-40a7-8461-157def5df61b_3p,
2d007624-62c1-440b-95e9-ddbde79d9272_3p
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p,
899c1527-1c38-46be-a86e-41e668b85dd9_3p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p,
2f39d051-52c6-40a7-8461-157def5df61b_3p,
2d007624-62c1-440b-95e9-ddbde79d9272_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_3p,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_3p,
42bed404-de0d-4d53-b99c-9957a5d84935_3p,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_3p,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_3p
result, different session: undefined
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_3p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_3p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_3p,
4cfede65-6a61-41c5-9886-5955cceade7a_3p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_3p
result, different session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_3p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_3p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_3p,
4cfede65-6a61-41c5-9886-5955cceade7a_3p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure
result, different session:
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure,
Error: IDBFactory.open: The operation is insecure
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p,
3fd13172-3a7c-450f-b720-d6726ff02716_3p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p,
3fd13172-3a7c-450f-b720-d6726ff02716_3p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (secret) => {
try {
return await IdbKeyVal.set('secret', secret);
} catch (e) {
throw new Error('Unsupported');
}
}
read: () => IdbKeyVal.get('secret')
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
localStorage
The localStorage API gives websites access to a key-value database that will remain available across visits. If the localStorage API is not partitioned or blocked, it can also be used to track users across websites. |
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p,
f26a2183-950a-4683-b904-12aeb1d2072b_3p,
bedd0c39-a154-4a8f-a181-961237dc6685_3p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p,
26593216-615b-49e5-9d37-3337d7d766e6_3p
result, different session:
ef23c895-aa0f-4990-99ad-a02c380a34a8_3p,
f26a2183-950a-4683-b904-12aeb1d2072b_3p,
bedd0c39-a154-4a8f-a181-961237dc6685_3p,
4e199ab4-ae9e-4536-b1e3-91ae791626bb_3p,
26593216-615b-49e5-9d37-3337d7d766e6_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p,
a516b344-3178-425e-a92c-fd669b2ab46d_3p,
490a9f95-0ed2-404e-909f-0c385f812351_3p
result, different session:
3dc1b8b5-c2bd-4a4d-bee8-7e0cf733300d_3p,
087bbd18-2f31-44a2-bed8-d69a42f4931f_3p,
09debfcd-ca11-4515-90d0-0d65d9e59f9d_3p,
a516b344-3178-425e-a92c-fd669b2ab46d_3p,
490a9f95-0ed2-404e-909f-0c385f812351_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_3p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_3p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_3p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_3p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_3p
result, different session:
4d540502-95f7-4a21-aaa9-c7abf4b08f10_3p,
f2720e51-3a8e-473b-9462-1b8c9f860da0_3p,
42cf2819-9196-4304-adf1-2b9b02c7a5ba_3p,
ccb86c92-abef-4cc9-8928-1d2ae1335fe9_3p,
87ef5082-2c9c-46b3-9e53-c5a8ddf06728_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p,
b057a3e1-eabe-4063-8914-511e904b99f5_3p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p,
54e87806-0159-46ee-aba8-9a081565e4e3_3p,
a41840c1-87b9-4c43-9c09-162379992b41_3p
result, different session:
bca8a7d1-b41b-4bbd-b644-122c50f8b193_3p,
b057a3e1-eabe-4063-8914-511e904b99f5_3p,
3c68bebd-f3e2-46ce-b2b5-09793a725c3a_3p,
54e87806-0159-46ee-aba8-9a081565e4e3_3p,
a41840c1-87b9-4c43-9c09-162379992b41_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p,
899c1527-1c38-46be-a86e-41e668b85dd9_3p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p,
2f39d051-52c6-40a7-8461-157def5df61b_3p,
2d007624-62c1-440b-95e9-ddbde79d9272_3p
result, different session:
080ab8f4-68bc-4c15-818f-f5a371a82beb_3p,
899c1527-1c38-46be-a86e-41e668b85dd9_3p,
a87fadef-4c5c-4aee-b9f7-1e1ba0e4905e_3p,
2f39d051-52c6-40a7-8461-157def5df61b_3p,
2d007624-62c1-440b-95e9-ddbde79d9272_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
24e2c530-43ce-4b2e-8658-97ed0ed4c70d_3p,
dac26500-75b6-440b-bd39-c5a4cb45b8cb_3p,
42bed404-de0d-4d53-b99c-9957a5d84935_3p,
9ea47fab-771b-4e4a-a8aa-2f3867d82c2a_3p,
5c2bad4e-fb04-4174-8e16-fb06cfbb7ffc_3p
result, different session: , , , ,
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p
result, different session:
3d8f74d8-de7b-4eae-a0df-2f1881d6d9fd_3p,
91e60022-64f5-4b47-8d0a-65e68a26fb32_3p,
0d12e0aa-7533-4978-a16a-6b7f1f9374e4_3p,
9d09a8a3-2165-4558-9dc0-76a995659c40_3p,
d7bbc814-57f7-49fd-b7a7-53f51ca4744b_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_3p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_3p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_3p,
4cfede65-6a61-41c5-9886-5955cceade7a_3p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_3p
result, different session:
b190732b-a22e-40a5-bfb0-dd59b6b1a451_3p,
8f1a2e02-4c7c-4688-9f6e-d85c1fbc007d_3p,
3bd7615a-3c77-45fc-9885-e4323b5fb346_3p,
4cfede65-6a61-41c5-9886-5955cceade7a_3p,
3730f2bc-98c5-4fdd-ad6a-8779db336886_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.
result, different session:
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.,
Error: The operation is insecure.
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p,
3fd13172-3a7c-450f-b720-d6726ff02716_3p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p
result, different session:
7bbb95af-f2a5-4bb9-8f0d-dd64e6fe3104_3p,
3fd13172-3a7c-450f-b720-d6726ff02716_3p,
cb73ff04-0dd1-4bb8-b1a3-32c4aad643e6_3p,
880c33b5-c2b9-4c11-a9a4-bf1b146ae19a_3p,
ec1c2a20-eb7d-4d5f-9586-bfb7ad4c274c_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (secret) => { window.localStorage.setItem('secret', secret); }
read: () => window.localStorage.getItem('secret')
result, same session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p
result, different session:
d565e489-86bc-4b04-9426-0180c2460d3e_3p,
9590cc9e-d5a8-4a13-a55a-c2185228e3bc_3p,
b9569c43-62ec-4a4e-80f5-19f8a15c0a7f_3p,
18f6a849-dad5-49e2-8ca8-e3fed59cb19b_3p,
db892d3d-9567-46ff-89ee-7cdbc3e2d282_3p
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
prefetch cache
A <link rel='prefetch'...> suggests to browsers they should fetch a resource ahead of time and cache it. But if browsers don't partition this cache, it can be used to track users across websites. |
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
result, different session:
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received,
Error: No requests received
unsupported: true, true, true, true, true
passed: undefined
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
return key;
}
read: async (key) => {
const link = document.createElement('link');
link.rel = 'prefetch';
link.href = testURI('resource', 'prefetch', key);
document.getElementsByTagName('head')[0].appendChild(link);
await sleepMs(500);
const response = await fetch(
testURI('ctr', 'prefetch', key), { cache: 'reload' });
const countString = (await response.text()).trim();
if (parseInt(countString) === 0) {
throw new Error('No requests received');
}
return countString;
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
script cache
Caching of scripts in web browsers is a standard behavior. But if that cache leaks between websites, it can be abused for cross-site tracking. |
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: (key) => new Promise((resolve, reject) => {
const script = document.createElement('script');
document.body.appendChild(script);
script.addEventListener('load', () => resolve(key), { once: true });
script.src = testURI('resource', 'script', key);
})
read: async (key) => {
const script = document.createElement('script');
document.body.appendChild(script);
const scriptLoadPromise = new Promise((resolve, reject) => {
script.addEventListener('load', resolve, { once: true });
});
script.src = testURI('resource', 'script', key);
await scriptLoadPromise;
const response = await fetch(
testURI('ctr', 'script', key), { cache: 'reload' });
return (await response.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
|
XMLHttpRequest cache
Similar to the newer Fetch API, any resource received may be cached by the browser. The cache is potentially vulnerable to cross-site tracking attack. |
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 2, 2, 2, 2, 2
unsupported: false, false, false, false, false
passed: true, true, true, true, true
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|
write: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
return key;
}
read: async (key) => {
const req = new window.XMLHttpRequest();
const loadPromise = new Promise(resolve => req.addEventListener('load', resolve));
req.open('GET', testURI('resource', 'xhr', key));
req.send();
await loadPromise;
const countResponse = await fetch(testURI('ctr', 'xhr', key),
{ cache: 'reload' });
return (await countResponse.text()).trim();
}
result, same session: 1, 1, 1, 1, 1
result, different session: 1, 1, 1, 1, 1
unsupported: false, false, false, false, false
passed: false, false, false, false, false
test failed: false, false, false, false, false
|