On Sat, Sep 2, 2017, at 06:06 AM, Emilio Cobos Álvarez wrote:
> Hi dev-platform@,
> 
> I'd like to unship access to the :-moz-system-metric pseudo-class, and
> the system metric media queries, from content pages. I just filed
> <https://bugzilla.mozilla.org/show_bug.cgi?id=1396066> for that.
> 
> They're not in any spec, and they seem unused (I can't find anything
> non-mozilla-related in Github code search). Furthermore they expose
> system information, which can be a fingerprinting vector, and pretty
> random stuff like "is a color picker available?".
> 
> According to Boris it predates Gecko's capacity to not expose stuff.
> 
> I think it should be pretty safe to unship, but let me know if you don't
> think that way, or have data that indicates the opposite.
> 
> The intention is to do that in Firefox 58, given we don't want to add
> extra risk to Stylo.

To make things clear, this bug is going to unship the pseudo-class
:-moz-system-metric and the following media queries from content page:
* -moz-color-picker-available
* -moz-scrollbar-start-backward
* -moz-scrollbar-start-forward
* -moz-scrollbar-end-backward
* -moz-scrollbar-end-forward
* -moz-scrollbar-thumb-proportional
* -moz-overlay-scrollbars
* -moz-windows-default-theme
* -moz-mac-graphite-theme
* -moz-mac-yosemite-theme
* -moz-windows-accent-color-in-titlebar
* -moz-windows-compositor
* -moz-windows-classic
* -moz-windows-glass
* -moz-menubar-drag
* -moz-windows-theme
* -moz-os-version
* -moz-swipe-animation-enabled
* -moz-physical-home-button
* -moz-is-glyph

Mostly of them will still be available in UA sheets and chrome
documents. -moz-physical-home-button may be removed completely as it is
just a leftover from B2G.

emilio's current patch also includes unshipping -moz-touch-enabled, but
I don't think we should do that until we implement the standard
equivalent of this media query in bug 1035774.

- Xidorn
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to