Bug #4113
X-REQUESTED-WITH header reveals browser
| Status: | New | Start date: | 11/12/2014 | |
|---|---|---|---|---|
| Priority: | Immediate | Due date: | ||
| Assignee: | - | % Done: | 0% | |
| Category: | - | |||
| Target version: | - | |||
| Component: |
Description
With javascript enabled, the X-Requested-With header has the following value, regardless of which useragent is selected via settings:
info.guardianproject.browser
Not sure if this is a limitation of Android itself, but surely this should send something generic?
Only tested it here:
https://duckduckgo.com/?q=useragent
Related issues