[tbb-bugs] #9623 [Tor Browser]: Referers being sent from hidden service websites

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri May 15 19:52:43 UTC 2015


#9623: Referers being sent from hidden service websites
-----------------------------+---------------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  major        |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-torbutton
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+---------------------------

Comment (by vynX):

 Consider that the reasoning not to deprecate Referer behavior only makes
 sense when interacting with legacy clearnet websites. Providers of onion
 services should learn not to rely on cross-domain referrer trickery. Every
 day some onion addresses are being leaked to my web servers just because
 they link me… that is a serious issue!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9623#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list