Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Storage access automatically granted for tracker "https://duckduckgo.com"

I hope I didn't miss something somewhere, but I can't get to understand what is exactly happening with what I'm doing.

I'm programming a webapp and in my app I open programmatically a new page to search something in duckduckgo. I'm using the following code window.open("https://duckduckgo.com/?q=something") which is good for me.

This all works fine, but I noticed that when this code is executed, in my console, the following is logged:

Storage access automatically granted for tracker "https://duckduckgo.com" on "http://localhost:8000".

I'm wondering what this means.
I'm aware that it's probably not something related to duckduckgo itself, maybe just that they are nice enough to actually log something and be transparent.

What information is exactly shared with an external website when using window.open? What does this "granting access to the tracker" mean? Where is this log in my console coming from? Can an external site actually execute some javascript code in my current page? This seem strange to me and would sound disastrous for privacy.

like image 894
chateau Avatar asked Nov 20 '19 19:11

chateau


1 Answers

So from what I understand from this firefox documentation page (plus a bit of experimenting with window.open):

When window.open is ran to open https://duckduckgo.com, this allow any tracker from https://duckduckgo.com that would be loaded from localhost now or in the next 30 days, to have access to it's own domain storage (and not only the one of localhost).

The message is logged by firefox itself to inform that you just granted this right to https://duckduckgo.com.

(Thanks a lot Amy for the link that allowed me to learn and answer myself :))

like image 72
chateau Avatar answered Nov 17 '22 01:11

chateau