Google Forms API interaction with Firefox
Hello everyone
I couldn't find the answer looking here at support page.
Scenario:
1.Link received by WhatsApp 2.Hit the link launched Firefox (which is my default phone browser) and Firefox displayed the google form 3.Google form API automatically filled the form email field with google account email
Question: from where google form get the email address data'
I made several tests and I can confirm Firefox allows google form API to read my phone settings. Cos, If I send the link to another phone with a different google account the behavior is the same: once link is open the google form autofill the email field with the google account email on that phone.
Isn't supposed FF will block tracking stuff?
This is not related with auto fill settings. I also made that test too, by wiping history data and results are the same. In fact the google form displays the message 'not your account? change it'
I would like to know if I can change this behavior on FF and if possible, why is not enabled by default. This kind of settings does not provide privacy at all.
All Replies (5)
Hi
I belive that this is being done by the keyboard app on your device, not Firefox for Android.
Hi.
Thanks for answer but if keyboard was doing this it should be doing the same with an alternative browser and does not.
Why?
Technically, most google forms request you to log in with your google account before proceed. If you have an android phone configured with your google account as 99% of users have you're already log in with your phone, into you google account.
Firefox allows google API to read your google account data from your phone and prefill the field. Allowing direct access to the form, which is fine for lazy or for people working within your own network, doing your own development, but unsafe if you receive the link from a third person, where once you click your data is harvested.
Firefox does not ask you if you want to login as should be done, protecting your privacy. However this issue does not occur by opening the link in private tab.
This behavior also happens on desktop Firefox, but within your PC you have more tools to control your data and easiness. On desktop If you have you gmail tab already open and click on some link pointing to google form, the API will detect you're already login into your google account, let you in and prefill account email data.
If you care, to protect your data (and rights) copying and paste the link in private tab it's really easy on PC. On your phone where all apps are a lot more interconnected, not so easy.
If you don't have open any gmail tab (or google account related tab) the API will ask you to login into google before proceed.
If you wanna try, just create some example google form and attempt to open.
Modified by Linuxser
Hi
I have just opened a sample Google Form in Firefox (Nightly) on my desktop and the form recognises that I am signed into a Google Account. I then send the tab to Firefox for Android (Nightly) on my Android device where I am not signed into a Google Account in Firefox for Android. The form does not pick up my email address as I am not signed into my account in that browser.
What happens when you do this?
Sorry for late reply.
Same as you say it happens to you happens to me.
But, for better practices, should not firefox warn or alert (at least) the user when open the link into a new tab? and it´s already log in on his google account? google, microsoft or whatever.
By disabling tab interoperability. Or maybe there is some config to tweak, unknown to me.
I'm aware that behavior it's ok to me but will drop away many users :%
Hi
It is really down that user to decide whether they wish to sign into an account. For a number of people, being able to access online services easily without having to sign in again is a very good thing.