EU-EDPS/website-evidence-collector

Incomplete evidence

Opened this issue · 1 comments

WEC does not collect favicon requests. Could be an issue of heedless mode: cyrus-and/chrome-har-capturer#90 (comment)

This is indeed a nice catch! I am happy that some users check carefully check the evidence and report it here.

So how should this be fixed? The best way would be: upstream in Chromium.

As this will certainly take a lot of time (if even considered), there exist a number of work arounds. We could:

  1. document that favicon requests for headless browsing is out of scope of the evidence collection
  2. add custom code

I am rather in favor of option 1, because it is more simple, does not slow down scans and I do not expect many privacy problems arising from the loading of favicons. Of course, this may change in the future.