[tbb-bugs] #15703 [Tor Browser]: Isolate mediasource: URI to first party domain

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Jun 23 14:54:30 UTC 2015


#15703: Isolate mediasource: URI to first party domain
-----------------------------+---------------------------------------
     Reporter:  mikeperry    |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  ff38-esr, tbb-linkability
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+---------------------------------------

Comment (by gk):

 Replying to [comment:2 arthuredelstein]:
 > In #15502, to save time, we disabled `URL.createObjectURL(...)` in Web
 Workers. For FF38, we should try to rewrite this patch to  properly
 isolate blob URLs to first party domain in Web Workers rather than
 disabling them.

 I've created #16429 to remind us about this issue still being unresolved.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15703#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list