[tbb-bugs] #15703 [Tor Browser]: Isolate mediasource: URI to first party domain

Thu Apr 16 02:28:53 UTC 2015

#15703: Isolate mediasource: URI to first party domain
---------------------------------------+--------------------------
 Reporter:  mikeperry                  |          Owner:  tbb-team
     Type:  defect                     |         Status:  new
 Priority:  normal                     |      Milestone:
Component:  Tor Browser                |        Version:
 Keywords:  ff38-esr, tbb-linkability  |  Actual Points:
Parent ID:                             |         Points:
---------------------------------------+--------------------------
 In #15502, we isolated blob: URIs to the first party domain. We should
 ensure that the new mediasource: uris are similarly isolated.

 When we do this, we should also ensure that these URIs are still properly
 isolated in odd contexts like WebWorkers, SharedWorkers, and
 ServiceWorkers, and add unit tests for this.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15703>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online