Implement text-fragments (with sufficient privacy protections)

[pes10k]

Chrome ships a feature called "Text Fragments" that allow for, effectively, automatically scrolling to text in the page. It seems useful, but has open and known privacy risks 1, 2.

Brave would like to implement, but we don't feel comfortable doing so as is. We should prompt users before respecting / scrolling to the text fragment, with browser-controlled UI asking something lilke:

Would you like to scroll to text "X" (if it exists)

1. Yes
2. No
[ ] Don't ask again for this site

If the user selects "yes", we should visibly scroll the user display to the text fragment (if it exists)

This would make it further difficult for the the linking page to use it to probe page contents, and significantly reduce the chance for user confusion / phisihing / credential stealing

[bsclifton]

cc: @rebron @anthonypkeane

[ghost]

@pes10k @bsclifton Hi all! I thought of this idea here: WICG/scroll-to-text-fragment#187

[psifertex]

None of this (Edit to add "this" being the security concerns in other related issues) seems like they would be blockers to creating links using this specification however? I frequently use this feature to send specific links to others, most of whom it will work for as they're not running brave.

I don't see why any security concerns on rendering such links would necessarily block the creation of them. Is there a different issue I'm missing that explains why that's the case?