[tbb-bugs] #18996 [Applications/Tor Browser]: Investigate server logging in ESR45

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon May 23 06:04:48 UTC 2016

#18996: Investigate server logging in ESR45
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  task                      |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ff45-esr                  |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:

Comment (by arthuredelstein):

 This feature allows the server to send JSON data for display in the web or
 browser console. I don't see any particular danger from this, particularly
 because it does not result in any data being sent from the client to the
 server, as far as I can tell. (Am I missing something?) Additionally, the
 feature is preffed off by default:

 pref("devtools.webconsole.filter.servererror", false);
 pref("devtools.webconsole.filter.serverwarn", false);
 pref("devtools.webconsole.filter.serverinfo", false);
 pref("devtools.webconsole.filter.serverlog", false);


 pref("devtools.browserconsole.filter.servererror", false);
 pref("devtools.browserconsole.filter.serverwarn", false);
 pref("devtools.browserconsole.filter.serverinfo", false);
 pref("devtools.browserconsole.filter.serverlog", false);

 although it is easy for the user to turn on, by pressing the "Server"
 button above the console.

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18996#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list