San Francisco, Jan 19 (SocialNews.XYZ) Tech giant Apple is working on a fix for a known bug in Safari that allows websites to view a user's browsing history and Google ID.
On Sunday, it was reported that the research team had found an issue with the way Apple had implemented IndexedDB API in Safari 15, reports AppleInsider.
The bug would allow any website to track a browser's internet activity, and potentially determine a user's identity.
Apple is now preparing a fix for the bug, according to a WebKit commit on GitHub, as spotted by MacRumors, the report said.
However, the fix will not be available to users until Apple rolls out updates for Safari on macOS Monterey, iOS 15 and iPadOS 15, it added.
IndexedDB is a browser API used by major web browsers as client-side storage, holding data such as databases.
Usually, the use of a "same-origin policy" will limit what data can be accessed by which website, and typically makes it so that a site can only access data that is generated, not those of other sites.
In the case of Safari 15 for macOS, iOS, and iPadOS, it was found that IndexedDB is violating the same-origin policy.
The researchers claim that whenever a website interacts with its database, a new empty database using the same name is created "in all other active frames, tabs, and windows within the same browser session."
Source: IANS
Gopi Adusumilli is a Programmer. He is the editor of SocialNews.XYZ and President of AGK Fire Inc.
He enjoys designing websites, developing mobile applications and publishing news articles on current events from various authenticated news sources.
When it comes to writing he likes to write about current world politics and Indian Movies. His future plans include developing SocialNews.XYZ into a News website that has no bias or judgment towards any.
He can be reached at gopi@socialnews.xyz
This website uses cookies.
