23614 2013-10-23 20:05:12 +0000 accessKeyLabel can expose new information about the user and possibly also other origins 2016-04-11 13:41:55 +0000 1 1 1 Unclassified HTML.next default unspecified PC All RESOLVED MOVED a11y, a11ytf, a11y_focus P2 normal --- 10888 10994 23613 1 mark.sadecki+w3c chaals ayg cooper ian laura.lee.carlson mike mounir public-html-a11y public-html-admin public-html-wg-issue-tracking robin zcorpan public-html-bugzilla oldest_to_newest 95232 0 mark.sadecki+w3c 2013-10-23 20:05:12 +0000 +++ This bug was initially created as a clone of Bug #10994 +++ Since accesskeys are chosen depending on the user's platform and available keys and available key bindings in the browser/OS, accesskeyLabel exposes that information about the user which was not possible before, i.e. it increases the fingerprinting. Moreover, if a browser considers accesskeys from cross-origin iframes when assigning a key, accessKeyLabel exposes information about the cross-origin iframed document (if it uses accesskeys) which was not possible before, e.g. it might be possible to tell if the user is logged in on the other site. 125235 1 chaals 2016-02-23 15:55:55 +0000 *** Bug 10994 has been marked as a duplicate of this bug. *** 125797 2 chaals 2016-04-11 13:41:55 +0000 We moved accessKeyLabel to WICG, since it had one buggy implementation and it would be nice if it were improved before we got more of them. https://discourse.wicg.io/t/accesskeylabel-author-accessible-info-about-shortcuts/1392