KaiOS Wikipedia App violates user privacy by loading data from third-party websites
Closed, DuplicatePublic
Actions

Assigned To

None

Authored By

	Aklapper
	Mar 9 2020, 8:52 PM

Description

src/components/Settings.js lists { title: i18n.i18n('settings-privacy'), link: 'https://foundation.m.wikimedia.org/wiki/Privacy_policy' }
(side note: could be https://foundation.m.wikimedia.org/wiki/Special:MyLanguage/Privacy_policy instead?), however the codebase loads (partially unencrypted) data from third-party websites such as

http[s]://ajax.googleapis.com
https://chart.googleapis.com/
http[s]://fonts.googleapis.com/
https://fonts.gstatic.com/

Related Objects

Mentioned Here: T245746: Font in Device

Event Timeline

Aklapper created this task.Mar 9 2020, 8:52 PM

Restricted Application added a project: Inuka-Team. · View Herald TranscriptMar 9 2020, 8:52 PM

Hi @Aklapper Thanks for raising the issue.

We do aware of this and the external download code will be removed in this ticket T245746: Font in Device

• JFishback_WMF added a project: Privacy Engineering.Mar 9 2020, 11:06 PM

• JFishback_WMF moved this task from Intake to Backlog on the Privacy board.

• JFishback_WMF moved this task from Incoming to Watching on the Privacy Engineering board.

@hueitan: Ah, thanks! If T245746 will remove all the calls to all the domains listed in the description here, then please feel free to Edit Related Tasks... → Close As Duplicate in the upper right corner. Thanks!

hueitan closed this task as a duplicate of T245746: Font in Device.Mar 10 2020, 11:31 AM

• JFishback_WMF moved this task from Watching to Completed on the Privacy Engineering board.Mar 18 2021, 6:54 PM

KaiOS Wikipedia App violates user privacy by loading data from third-party websitesClosed, DuplicatePublicActions

Description

Related Objects

Event Timeline

KaiOS Wikipedia App violates user privacy by loading data from third-party websites
Closed, DuplicatePublic
Actions