[tbb-bugs] #18168 [Tor Browser]: Iframe based AJAX call blocked by popup-blocker or opening in new tab

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Jan 27 22:19:47 UTC 2016


#18168: Iframe based AJAX call blocked by popup-blocker or opening in new tab
-----------------------------+-----------------------------------
     Reporter:  sky_kohai    |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  Medium       |  Milestone:
    Component:  Tor Browser  |    Version:
     Severity:  Normal       |   Keywords:  tbb-usability-website
Actual Points:               |  Parent ID:
       Points:               |    Sponsor:
-----------------------------+-----------------------------------
 Iframe based AJAX call blocked by popup-blocker. After allowing popups,
 form submits to new tab instead of hidden iframe.

 Issue appeared in TBB 5.5. TBB 5.0.7 (previous stable) works with same
 code normally.

 To reproduce go to http://dmirrgetyojz735v.onion/d/#set-lang:en and try to
 make post with JS support enabled.
 Code of submit and AJAX handlers can be found in
 http://dmirrgetyojz735v.onion/js/tinaib1.js , seek doPostForm func.

 Trace is like
 {{{

 WARNING: content window passed to PrivateBrowsingUtils.isWindowPrivate.
 Use isContentWindowPrivate instead (but only for frame scripts).
 pbu_isWindowPrivate at resource://gre/modules/PrivateBrowsingUtils.jsm:25:14
 nsBrowserAccess.prototype.openURI at chrome://browser/content/browser.js:15194:21

 }}}

 Depending of the exact code, call stack may contain func, which actually
 submitted form.

 Tested on Ubuntu 14.04 x64.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18168>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list