Websites telling me what I can do with my own browser so they can have their pointless cookies
Websites telling me what I can do with my own browser so they can have their pointless cookies
It's not even "Incognito" (what a misnomer too), this is a Gecko-based browser
You're viewing a single thread.
Let Mozilla know by filing a report on Webcompat.
I'll look into that. I believe web sites shouldn't have any way to detect private mode, right?
I wonder if it tries to save a cookie then read it back? I don't really know how any of this works but that sounds like a way to detect it that's fairly infallible.
Writing a cookie and reading it back should work just fine even in incognito mode. It just gets deleted once incognito is closed.
There are ways to detect private browsing by querying browser features or behaviours that are different in private browsing.
For example, in Firefox calling
Navigator.serviceworkerreturnsundefinedif private browsing is enabled.Check out this script for ways to detect this in popular browsers:
https://github.com/Joe12387/detectIncognito/blob/main/src/detectIncognito.ts
Maybe incognito enforces CSP more strictly.