[blink-dev] PSA: Preventing User Dictionary Leaks via ::spelling-error and ::grammar-error CSS Pseudo-Elements Explainer

[Ari Chivukula]

Contact Emails

ari...@chromium.org, a...@google.com, la...@chromium.org

Explainer

https://explainers-by-googlers.github.io/user-dictionary-leaks/

Summary

We want to prevent websites from extracting information about a user’s dictionary using CSS spelling/grammar hint highlights. This is currently possible by making a text field with a repeated (misspelled) word autofocus and monitoring rendering performance to notice when highlighting occurs.