Mulled Chrome API shines light on long-neglected privacy gap: Sites can snoop on your find-in-page searches

Mulled Chrome API shines light on long-neglected privacy gap: Sites can snoop on your find-in-page searches

Analysis A browser feature being developed for the open-source Chromium platform has raised data-leakage privacy concerns – though the Google engineers working on the project contend the potential benefits outweigh the risks.


The issue – potential leakage of text entered into the find-in-page search popup invoked by hitting the CTRL-F command – has been a worry for more than eight years. Separate but related Chromium bugs in 2012 and in 2017 highlight the problem. Google's engineers have apparently marked it "won't fix" because it might break things.


Earlier this month, Google software engineer Joey Arhar mulled chrome shines light neglected privacy sites snoop searches