[tbb-bugs] #17009 [Tor Browser]: Shift and Alt keys leak physical Keyboard layout

[Tor Bug Tracker & Wiki]

#17009: Shift and Alt keys leak physical Keyboard layout
-------------------------------------------------+-------------------------
 Reporter:  arthuredelstein                      |          Owner:  tbb-
     Type:  defect                               |  team
 Priority:  Medium                               |         Status:
Component:  Tor Browser                          |  needs_review
 Severity:  Normal                               |      Milestone:
 Keywords:  tbb-fingerprinting,                  |        Version:
  TorBrowserTeam201512                           |     Resolution:
Parent ID:                                       |  Actual Points:
  Sponsor:                                       |         Points:
-------------------------------------------------+-------------------------
Changes (by arthuredelstein):

 * status:  needs_revision => needs_review


Comment:

 Here's a revised version that allows Shift and Alt KeyboardEvents to be
 generated, but make those events invisible to content, dispatching them to
 chrome scripts only.

 https://github.com/arthuredelstein/tor-browser/commits/17009+4

 As before, there are three patches:
 1. 8a38085, Fixup our KeyboardEvent patch to ensure that the modifierState
 property matches the altKey and shiftKey properties.
 2. 9154cda, Create a mechanism for suppressing Shift and Alt keydown/keyup
 events in content (while not suppressing events like { key: Q, modifier:
 shift }, etc.)
 3. a52af8e, Enable the pref in patch (2).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17009#comment:28>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online