Privacy Test Pages

🛡 Collection of pages for testing various privacy and security features of browsers and browser extensions.

View source and contribute on GitHub.

Tracker Reporting

• 1 major tracker loaded via script
• 1 major tracker with surrogate
• 1 major tracker loaded via img
• Image loaded via document fragment [Delay 5s]
• 1 major tracker loaded via fetch [Delay 5s]

Ad attribution flow

• Example search ad attribution flow

Browser Features

• Geolocation
• Links Open in New Window
• window.close() Link
• Simple text area for editing
• URL Schemes
• Stack tracing
• Canvas draw
• Downloads
• Print
• Fonts
• Cookie consent popups
• Cookie consent notice banners
• Navigator Interface
• JS alerts and Hanging
• Local storage
• Client Hints
• Harmful APIs
• Element Hiding
• Auto Refresh
• Favicon
• Network Errors

Security

• Address Bar Spoofing
• Infinite location.reload() loop
• Leak of extension IDs via CSP
• Detect changes to JS objects in global scope
• Popup noopener/noreferrer tests
• Phishing Detection Pages

Privacy Protections Tests

• Request blocking
• Fingerprinting
• Fingerprinting canvas verification
• Storage blocking
• Storage partitioning
• Referrer trimming
• HTTPS upgrades
• HTTPS upgrade loop protection
• Facebook click to load
• YouTube click to load
• Surrogates
• Global Privacy Control
• AMP Links
• AMP Loop Protection
• Query Parameters
• Runtime checks
• Local port scanning
• Bounce tracking

Autofill

Note: Autofill features currently only work on secure contexts, so no http://.

• Address form submission detection and autofill
• Card form submission detection and autofill
• Email autofill when form is within an iframe
• Email autofill form within self-closing modal
• Form submission detection and autofill
• Form submission detection and autofill within an iframe
• Form submission detection and autofill within an same frame iframe
• Password generation during signup
• Password update/reset forms
• Forms within shadow DOM
• Autoprompt credentials autofill when a login form is front and center
  • Sign up form present on pageload
  • Login form present on pageload
  • Login form in modal
  • Multistep login form
  • With dialog covering the form
  • Form below the fold on mobile but in sidebar on larger screens

Other

• Crawler Detectability test
• API call attribution test
• Site specific tracker blocking test
• 🗑️ Clear domain data
• Viewport test cases
• Windows Browser: MainWorld Script injection tests
• Windows Browser: SecureWorld Script injection tests
• Webcompat tests
• Site Breakage Reach Calculator