[tbb-bugs] #15703 [Tor Browser]: Isolate mediasource: URI to first party domain

[Tor Bug Tracker & Wiki]

#15703: Isolate mediasource: URI to first party domain
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  mikeperry              |     Status:  new
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  ff38-esr, tbb-linkability, tbb-5
  Browser                |  .0a-highrisk
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by arthuredelstein):

 Replying to [comment:6 gk]:
 > Given that this will be heavily used on Youtube and available at least
 on Windows and OS X we might want to get this properly fixed for ESR 38.
 >
 > If we don't have the capacity we should disable it on Windows and OS X
 as well.

 I've done some work on this in the form of writing unit tests, but
 depending on other patches, it may not be possible to finish by Thursday.
 From my inspection of the code, it appears like the non-worker mediasource
 isolation already works because of our blob URI isolation patch. I still
 need to complete the unit tests to confirm my impression and also check
 the isolation in workers.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15703#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online