#981: Call stacks in crash reports from unresponsive web pages
Discussions
2024-09-16
https://github.com/w3ctag/design-reviews-private-brainstorming/issues/1
Jeffrey: I'm generally favorable.
Peter: Will the browser pop up a request?
Jeffrey: I think the developers expect that not, but it could.
Tess: In the extension case, website users probably won't notice what it's revealing. But the UI could just say "these 5 extensions injected code and might be revealed." Don't rely solely on displaying the stack trace.
Peter: There's room for the UA to be smart. Don't want any crash report sent without my consent. Page should say "page requested a crash report", and let me say yes/no.
Tess: Good to let UAs compete on providing the most user-protecting interface. Spec should be clear enough about these concerns that a new naive engineer does something decent.
satisfied with concerns
:
This looks like a worthwhile piece of information to show to developers. We agree with the privacy worries that these uploads might expose what extensions a user is running. We suspect this privacy risk is avoidable in two ways: First, you could automatically omit stacks if any extensions have injected content scripts. Second, you could prompt the user about whether they want to send the report, with a user-comprehensible explanation of what sensitive information's likely to be sent; for example the list of extensions that injected script.
Please continue discussing this in the WebPerf working group and the PING.
</blockquote>
OpenedAug 13, 2024
こんにちは TAG-さん!
I'm requesting a TAG review of Call stacks in crash reports from unresponsive web pages.
When a web page becomes unresponsive, it's often because of JavaScript code which is busy running an infinite loop or other very long computation. When a developer receives a report from the crash reporting API, and the reason is unresponsive, it would be very helpful to include the JS call stack from when the page was deemed unresponsive. This would let the website developer more easily find the find and fix the problem. What happens instead? The page reports that it was terminated due to being unresponsive, but the developer of the page has no further information about how to fix the problem.
Further details:
You should also know that...