[tbb-bugs] #16757 [Tor Browser]: Verify that new DOM properties are really disabled

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Aug 10 20:36:44 UTC 2015


#16757: Verify that new DOM properties are really disabled
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  tbb-
     Type:  defect                               |  team
 Priority:  normal                               |         Status:  new
Component:  Tor Browser                          |      Milestone:
 Keywords:  tbb-fingerprinting,                  |        Version:
  tbb-5.0-regression                             |  Actual Points:
Parent ID:                                       |         Points:
-------------------------------------------------+-------------------------
 In https://lists.torproject.org/pipermail/tor-qa/2015-August/000667.html,
 boklm notes:

 {{{
 We have the following DOM objects that were not present in esr31:

 onlanguagechange, mozRequestOverfill, back, forward, home, openDialog,
 controllers, realFrameElement, MozSelfSupport, _content, Symbol,
 WeakSet, HTMLPictureElement, AnimationEffect, PerformanceMeasure,
 PluginCrashedEvent, MenuBoxObject, ScrollViewChangeEvent,
 SelectionStateChangedEvent, DOMMatrixReadOnly, DOMMatrix,
 PopupBoxObject, AnimationTimeline, PerformanceMark, DOMApplication,
 IDBMutableFile, StereoPannerNode, CameraDetectedFace,
 CameraStateChangeEvent, CSSCounterStyleRule, CameraRecorderVideoProfile,
 CameraRecorderProfile, CameraRecorderProfiles, AnonymousContent,
 NamedNodeMap, DOMApplicationsManager, ContentProcessMessageManager,
 CameraConfigurationEvent, HTMLAllCollection, PromiseDebugging,
 SubtleCrypto, Animation, CameraRecorderAudioProfile, RadioNodeList,
 WindowRoot, CameraClosedEvent, CryptoKey, CameraFacesDetectedEvent,
 MozSettingsTransactionEvent, IDBFileRequest, BroadcastChannel,
 MessageChannel, AnimationPlayer
 }}}

 Some of those should have been disabled by various prefs we have set (in
 particular PerformanceMeasure, PerformanceMark, and the IDB objects). We
 should look into that. Hopefully they are just empty placeholders. Also,
 the camera stuff should have been compiled out and also disabled via the
 peerconnection prefs, I thought.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16757>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list