[tbb-bugs] #18205 [Tor Browser]: Restrict font whitelist patch to apply only to non-chrome contexts?

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Feb 5 08:14:44 UTC 2016


#18205: Restrict font whitelist patch to apply only to non-chrome contexts?
--------------------------------------+--------------------------
 Reporter:  arthuredelstein           |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Tor Browser               |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-fingerprinting-fonts  |  Actual Points:
Parent ID:  #18097                    |         Points:
  Sponsor:                            |
--------------------------------------+--------------------------

Comment (by cypherpunks):

 Are sure that this will not be used for fingerprinting? What if a page
 opens an iframe with some chrome: elements (for example a pdf) and
 measures its content someway without code injection?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18205#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list