Skip to content
All fingerprint checks
Render & GPU

A worker OffscreenCanvas encodes the pixels it reads back

Pim· Clearcote Research 2 min readCheck id offscreen-canvas-exits-agree

In a worker, an OffscreenCanvas's getImageData and the decoded PNG from its convertToBlob agree on every channel. Information only (severity: info).

What a detector infers

A canvas has more than one way out. getImageData hands pixels straight to script; convertToBlob encodes the same pixels into a file, and with PNG, which is lossless, decoding that file has to give back exactly what getImageData returned. canvas-todataurl-vs-getimagedata makes this comparison on the page's main thread.

This row makes it inside a dedicated worker, on an OffscreenCanvas, which has its own exits: a perturbation has to cover both of them in every realm, and one applied to the worker's getImageData but not to its convertToBlob — or the reverse — makes the decoded file and the direct readback disagree. The drawing is opaque and contains no text, so neither alpha premultiplication nor font rendering can introduce a legitimate difference.

Measured on every stock browser tested: no differing channel. Only that side is measured — no spoof tested here produced a disagreement — so the row is information only until a failing case has been observed. N/A where workers or OffscreenCanvas are unavailable.

How to resolve it

Apply any canvas perturbation at the point every exit reads from, in every realm, or not at all. Covering one OffscreenCanvas exit in a worker and not the other leaves a lossless encode that no longer matches the pixels.

Cross-realm coherence: why a worker must agree with the page

Nearby checks in Render & GPU

See all 64 checks in Render & GPU
Who builds this test

Clearcote is a browser built for fingerprint coherence

It is a Chromium fork, maintained by the same people who wrote this reference. It ships as a compiled browser rather than as a stealth script injected into someone else's — which is a description of how it is built, and is not an argument about how it behaves on this check.

This audit takes no position on how Clearcote scores on Render & GPU checks, on this one, or anywhere else. It has no baseline corpus of other people's fingerprints to rank you against and no vendor scoreboard — nearly every check is self-referential, asking one browser the same question through two independent APIs and reporting whether both answers can be true at once. It runs identically on any browser, including ours. Run it on yours and read the result yourself.

See the other checks in Render & GPU — the family offscreen-canvas-exits-agree belongs to.