A website I must use has a link to facebook, instagram, youtube. The links look like this:
<svg class="icon_class" viewbox="0 0 18 28" focusable="false">
<use xlink:href="/path/to/icons/facebook.svg?cb=43b55d0bgg5...very long#icon"></use>
</svg>
Things I noticed:
* The _cb_ part is only there when I am logged in.
* I logged in several times (after deleting cookies), but the _cb_ content was always the same.
* Each link contains different _cb_ content. The facebook number is always the same, but different from the instragram/youtube number and so on.
I thought it could be some sort of csrf protection. But that should contain random content and that is not the case.
What is this _cb_ parameter?
Could this be used for some sort of tracking?
Is there a technical/not_evil explanation of that parameter?
#privacy #privatsphare #privacidad #privacymatters