[tbb-bugs] #13050 [Tor Browser]: system locale leaked via JavaScript Date.toLocaleString() format

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Sep 3 23:14:22 UTC 2014


#13050: system locale leaked via JavaScript Date.toLocaleString() format
-------------------------+--------------------------
 Reporter:  cypherpunks  |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  normal       |      Milestone:
Component:  Tor Browser  |        Version:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
-------------------------+--------------------------
 I am using the en_US Tor Browser 3.6.5 on Linux, with the system set to a
 non-English locale.

 When I visit [http://browserspy.dk/date.php], the time is displayed as
 UTC, but the "Locale String"/"Time on your PC" tests show the time in the
 format of the non-English system locale.

 Both of these tests print the value of the JavaScript
 Date.toLocaleString() method.

 I can control the format used by toLocaleString() by explicitly setting
 the LANG environment variable when running start-tor-browser.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13050>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list