{"action":"created","issue":{"url":"https://api.github.com/repos/EFForg/privacybadger/issues/1506","repository_url":"https://api.github.com/repos/EFForg/privacybadger","labels_url":"https://api.github.com/repos/EFForg/privacybadger/issues/1506/labels{/name}","comments_url":"https://api.github.com/repos/EFForg/privacybadger/issues/1506/comments","events_url":"https://api.github.com/repos/EFForg/privacybadger/issues/1506/events","html_url":"https://github.com/EFForg/privacybadger/pull/1506","id":243271110,"number":1506,"title":"Add Twitter DNT meta tag.","user":{"login":"cowlicks","id":598099,"avatar_url":"https://avatars0.githubusercontent.com/u/598099?v=4","gravatar_id":"","url":"https://api.github.com/users/cowlicks","html_url":"https://github.com/cowlicks","followers_url":"https://api.github.com/users/cowlicks/followers","following_url":"https://api.github.com/users/cowlicks/following{/other_user}","gists_url":"https://api.github.com/users/cowlicks/gists{/gist_id}","starred_url":"https://api.github.com/users/cowlicks/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cowlicks/subscriptions","organizations_url":"https://api.github.com/users/cowlicks/orgs","repos_url":"https://api.github.com/users/cowlicks/repos","events_url":"https://api.github.com/users/cowlicks/events{/privacy}","received_events_url":"https://api.github.com/users/cowlicks/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/EFForg/privacybadger/milestones/13","html_url":"https://github.com/EFForg/privacybadger/milestone/13","labels_url":"https://api.github.com/repos/EFForg/privacybadger/milestones/13/labels","id":2655573,"number":13,"title":"W30-31","description":"Wee 30 to 31 Sprint","creator":{"login":"andresbase","id":1775039,"avatar_url":"https://avatars0.githubusercontent.com/u/1775039?v=4","gravatar_id":"","url":"https://api.github.com/users/andresbase","html_url":"https://github.com/andresbase","followers_url":"https://api.github.com/users/andresbase/followers","following_url":"https://api.github.com/users/andresbase/following{/other_user}","gists_url":"https://api.github.com/users/andresbase/gists{/gist_id}","starred_url":"https://api.github.com/users/andresbase/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andresbase/subscriptions","organizations_url":"https://api.github.com/users/andresbase/orgs","repos_url":"https://api.github.com/users/andresbase/repos","events_url":"https://api.github.com/users/andresbase/events{/privacy}","received_events_url":"https://api.github.com/users/andresbase/received_events","type":"User","site_admin":false},"open_issues":12,"closed_issues":8,"state":"open","created_at":"2017-07-22T03:15:14Z","updated_at":"2017-08-12T02:36:06Z","due_on":"2017-08-04T07:00:00Z","closed_at":null},"comments":8,"created_at":"2017-07-16T22:29:46Z","updated_at":"2017-08-15T00:06:02Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/EFForg/privacybadger/pulls/1506","html_url":"https://github.com/EFForg/privacybadger/pull/1506","diff_url":"https://github.com/EFForg/privacybadger/pull/1506.diff","patch_url":"https://github.com/EFForg/privacybadger/pull/1506.patch"},"body":"Twitter recently withdrew support for allowing their users to opt out of tracking with DNT. But they still quietly support this privacy policy in the case where website publisher's choose to use it when they embed Twitter content. They no longer call this privacy policy \"DNT\", but they have confirmed that the policy has not changed.\r\n\r\nThis PR embeds a meta tag on websites that load content from twitter. Twitter has no* way of distinguishing meta tags embedded by the website publisher, or by an extension in the user's browser. So they should continue to apply their DNT policy on visited with PB.\r\n\r\nTwitter's documentation about this privacy policy is here: https://dev.twitter.com/web/overview/privacy#what-privacy-options-do-website-publishers-have\r\n\r\n(*) no practical method to my knowledge"},"comment":{"url":"https://api.github.com/repos/EFForg/privacybadger/issues/comments/322342572","html_url":"https://github.com/EFForg/privacybadger/pull/1506#issuecomment-322342572","issue_url":"https://api.github.com/repos/EFForg/privacybadger/issues/1506","id":322342572,"user":{"login":"cowlicks","id":598099,"avatar_url":"https://avatars0.githubusercontent.com/u/598099?v=4","gravatar_id":"","url":"https://api.github.com/users/cowlicks","html_url":"https://github.com/cowlicks","followers_url":"https://api.github.com/users/cowlicks/followers","following_url":"https://api.github.com/users/cowlicks/following{/other_user}","gists_url":"https://api.github.com/users/cowlicks/gists{/gist_id}","starred_url":"https://api.github.com/users/cowlicks/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cowlicks/subscriptions","organizations_url":"https://api.github.com/users/cowlicks/orgs","repos_url":"https://api.github.com/users/cowlicks/repos","events_url":"https://api.github.com/users/cowlicks/events{/privacy}","received_events_url":"https://api.github.com/users/cowlicks/received_events","type":"User","site_admin":false},"created_at":"2017-08-15T00:06:02Z","updated_at":"2017-08-15T00:06:02Z","body":"Always injecting would make it very easy to fingerprint Privacybadger users. Sites can already do this, however with the suggested change, it would make it trivial.\r\n\r\nAnother issue is that such a content script would *always* be run, even if privacybadger was deactivated for the site.\r\n\r\nI see the widget replacement system eventually becoming more a more general purpose system for running code in webpages to modify them. For example unwrapping url's could be part of it eventually. "}}
{"actor":{"display_login":"cowlicks"}}